Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
36s -
max time network
45s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
28/11/2022, 05:01
Behavioral task
behavioral1
Sample
6d34c5bf41fecf2a2ebd651a141917c96d39ef496aa6ab1517799b4cd6e82427.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6d34c5bf41fecf2a2ebd651a141917c96d39ef496aa6ab1517799b4cd6e82427.exe
Resource
win10v2004-20220901-en
General
-
Target
6d34c5bf41fecf2a2ebd651a141917c96d39ef496aa6ab1517799b4cd6e82427.exe
-
Size
100KB
-
MD5
6ecd452cd07a1da0319ce100c57e7a60
-
SHA1
d6b53cea32e9db8d5226df7c38f8fa835d37352b
-
SHA256
6d34c5bf41fecf2a2ebd651a141917c96d39ef496aa6ab1517799b4cd6e82427
-
SHA512
dbd6e2dbe4720409fa9c78ebdb43ce1f014262ae7bc13a7fa9b30cace5693623260393cd9b83740ae8876292bc2d198d6902c60bec6579a5dc80dd18e8d68ba0
-
SSDEEP
1536:RzRfPMnXaPhtMT5O230uo5lUdgLKL55yUwoX+7ftAYLppnkOhaAD1p6504y2g:RzNPOaIE2Hoi55Lw/yYvlw6X6zBg
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/1508-54-0x0000000000400000-0x0000000000442000-memory.dmp upx -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1508 6d34c5bf41fecf2a2ebd651a141917c96d39ef496aa6ab1517799b4cd6e82427.exe -
Suspicious use of UnmapMainImage 1 IoCs
pid Process 1508 6d34c5bf41fecf2a2ebd651a141917c96d39ef496aa6ab1517799b4cd6e82427.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\6d34c5bf41fecf2a2ebd651a141917c96d39ef496aa6ab1517799b4cd6e82427.exe"C:\Users\Admin\AppData\Local\Temp\6d34c5bf41fecf2a2ebd651a141917c96d39ef496aa6ab1517799b4cd6e82427.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of UnmapMainImage
PID:1508