Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
35s -
max time network
44s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
01/12/2022, 01:16
Static task
static1
Behavioral task
behavioral1
Sample
8b1e310161b6696bbbb2ca4e3cf147fc75923f4196f6906a72bab89d34558656.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8b1e310161b6696bbbb2ca4e3cf147fc75923f4196f6906a72bab89d34558656.exe
Resource
win10v2004-20220901-en
General
-
Target
8b1e310161b6696bbbb2ca4e3cf147fc75923f4196f6906a72bab89d34558656.exe
-
Size
45KB
-
MD5
42f14fce9757cce55f82a37e0b12d461
-
SHA1
0bf6ebf4f1666f4b8212baf19d6b139ef97a5701
-
SHA256
8b1e310161b6696bbbb2ca4e3cf147fc75923f4196f6906a72bab89d34558656
-
SHA512
faa4d70721885f9a52002d42b7cf12c9e64a534b9e40bcfa7b829b9c14f30a1b98d095bd9502dce38bdd66871d99c1e6a809b870badc340f35eaf0060a98b4ad
-
SSDEEP
768:0NDZ2Y733ZL4OsPDsJODbfnH+bM0Mhrn/ig9uQrIJho5OB7:018OyskbP+o0AgQrIX7
Malware Config
Signatures
-
Drops file in System32 directory 5 IoCs
description ioc Process File opened for modification C:\Windows\SysWOW64\WmInit.exe 8b1e310161b6696bbbb2ca4e3cf147fc75923f4196f6906a72bab89d34558656.exe File created C:\Windows\SysWOW64\WmInit.exe 8b1e310161b6696bbbb2ca4e3cf147fc75923f4196f6906a72bab89d34558656.exe File opened for modification C:\Windows\SysWOW64\tmp 8b1e310161b6696bbbb2ca4e3cf147fc75923f4196f6906a72bab89d34558656.exe File created C:\Windows\SysWOW64\tmp 8b1e310161b6696bbbb2ca4e3cf147fc75923f4196f6906a72bab89d34558656.exe File created C:\Windows\SysWOW64\WmInit.dat 8b1e310161b6696bbbb2ca4e3cf147fc75923f4196f6906a72bab89d34558656.exe