Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
33s -
max time network
50s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
06/12/2022, 11:13
Behavioral task
behavioral1
Sample
9219afa7af93b568ac0d830933b39e90c03f6ae7d734b298e1c80c36f0b15078.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9219afa7af93b568ac0d830933b39e90c03f6ae7d734b298e1c80c36f0b15078.exe
Resource
win10v2004-20220901-en
General
-
Target
9219afa7af93b568ac0d830933b39e90c03f6ae7d734b298e1c80c36f0b15078.exe
-
Size
17KB
-
MD5
baed9564d5325638d9d68d9d1ae988a3
-
SHA1
5e859a5359d6e622a77c8db4ec485b3226513f45
-
SHA256
9219afa7af93b568ac0d830933b39e90c03f6ae7d734b298e1c80c36f0b15078
-
SHA512
00321592c89ec3e4696d01be25782a3f8a168e8ca136175962d3d539c011c70f3602ff2983ae63ec00a20ba59d84ba007bff8e5bcb758fb0cd0db4d33c6204c9
-
SSDEEP
384:pMqKVjEnYgXWcthhjz5AKxpnL47FAx/r6+e9Pfqbn1cjx0:pMqKqnYgXWcthhjz5NL47+xuha5cjx0
Malware Config
Signatures
-
Modifies registry class 5 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\shell\OpenHomePage 9219afa7af93b568ac0d830933b39e90c03f6ae7d734b298e1c80c36f0b15078.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\shell\OpenHomePage\Command 9219afa7af93b568ac0d830933b39e90c03f6ae7d734b298e1c80c36f0b15078.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID 9219afa7af93b568ac0d830933b39e90c03f6ae7d734b298e1c80c36f0b15078.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} 9219afa7af93b568ac0d830933b39e90c03f6ae7d734b298e1c80c36f0b15078.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\shell 9219afa7af93b568ac0d830933b39e90c03f6ae7d734b298e1c80c36f0b15078.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1956 9219afa7af93b568ac0d830933b39e90c03f6ae7d734b298e1c80c36f0b15078.exe