Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
36s -
max time network
49s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
01/12/2022, 14:37
Static task
static1
Behavioral task
behavioral1
Sample
63cb19950de22e8df62147db79fc564a8d560e5c4c377c5988054d795f945556.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
63cb19950de22e8df62147db79fc564a8d560e5c4c377c5988054d795f945556.exe
Resource
win10v2004-20220812-en
General
-
Target
63cb19950de22e8df62147db79fc564a8d560e5c4c377c5988054d795f945556.exe
-
Size
69KB
-
MD5
3e204ca172b28666a55411fa093729f0
-
SHA1
eca10cd236577c57dcfa853e0127b786e0e53f3b
-
SHA256
63cb19950de22e8df62147db79fc564a8d560e5c4c377c5988054d795f945556
-
SHA512
602f713f99bbc3a44d3f7861e8d411bbf0f9bc6b3813c1c434b784d0c93777406ba41c6e1f4ba70eb799f5ac614316ffb5c7b806286564fcda61d85f65b250e4
-
SSDEEP
1536:ZJk6w0lgaALGijbK4qiXcBc7fOwrcX+39:Zvg1yIDqXwcs
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
pid Process 1632 63cb19950de22e8df62147db79fc564a8d560e5c4c377c5988054d795f945556.exe -
Suspicious behavior: MapViewOfSection 2 IoCs
pid Process 1632 63cb19950de22e8df62147db79fc564a8d560e5c4c377c5988054d795f945556.exe 1632 63cb19950de22e8df62147db79fc564a8d560e5c4c377c5988054d795f945556.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\63cb19950de22e8df62147db79fc564a8d560e5c4c377c5988054d795f945556.exe"C:\Users\Admin\AppData\Local\Temp\63cb19950de22e8df62147db79fc564a8d560e5c4c377c5988054d795f945556.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: MapViewOfSection
PID:1632