Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
117s -
max time network
46s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
05/12/2022, 21:33
Behavioral task
behavioral1
Sample
c5582c8520188b3c82866ec4a917276649681345f6ce6818cf7e4ac3a8750d2b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c5582c8520188b3c82866ec4a917276649681345f6ce6818cf7e4ac3a8750d2b.exe
Resource
win10v2004-20220812-en
General
-
Target
c5582c8520188b3c82866ec4a917276649681345f6ce6818cf7e4ac3a8750d2b.exe
-
Size
41KB
-
MD5
cb2c1bc00ab2c2d2aa56709940f9cb49
-
SHA1
a564d8e28de8f615dd7188d5b0aa26c478293156
-
SHA256
c5582c8520188b3c82866ec4a917276649681345f6ce6818cf7e4ac3a8750d2b
-
SHA512
9c183383c12ae056dc94a2f160a852deff32900cf49be27f374945802a4e0d4e764fd97b41163a7f9c527517d83481e428cf730a9efb5e435d1f9691fb8dd2ea
-
SSDEEP
768:84eK5svgs9wT8G84Intff005KB1NTPFATLsbBkn:8s5gGT/84aeHnNFda
Malware Config
Signatures
-
Nirsoft 2 IoCs
resource yara_rule behavioral1/memory/1072-55-0x0000000000400000-0x000000000041A000-memory.dmp Nirsoft behavioral1/memory/1072-56-0x0000000000400000-0x000000000041A000-memory.dmp Nirsoft -
resource yara_rule behavioral1/memory/1072-55-0x0000000000400000-0x000000000041A000-memory.dmp upx behavioral1/memory/1072-56-0x0000000000400000-0x000000000041A000-memory.dmp upx