Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
41s -
max time network
45s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
06/12/2022, 12:12
Behavioral task
behavioral1
Sample
067f07d5d1a520c34cd2d65064ae16e07e388d78e6e15a1921c09dc96436ee8d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
067f07d5d1a520c34cd2d65064ae16e07e388d78e6e15a1921c09dc96436ee8d.exe
Resource
win10v2004-20221111-en
General
-
Target
067f07d5d1a520c34cd2d65064ae16e07e388d78e6e15a1921c09dc96436ee8d.exe
-
Size
240KB
-
MD5
39fe50716d354e964cadc6439aa3f2d0
-
SHA1
b3f7881eb353a725c97b9da93d2756789470caf4
-
SHA256
067f07d5d1a520c34cd2d65064ae16e07e388d78e6e15a1921c09dc96436ee8d
-
SHA512
1acd265431fc98b6421a2bca76ece377ec482e988b0c6641978119b76173af58a2a554e7536aae7c6307e53b76cca78683cd602f87a0f73cd5ab5303ff86ee65
-
SSDEEP
3072:JfhVdKZvIAFcbkGJhGfKZPensIHGBizTjAHJ+SGHRRcC2NuBUcz6Q75ANyc0cUsG:Jkp1SJaGfyGSnHRuhOVAIQUsbS
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/1760-55-0x0000000000400000-0x000000000064D000-memory.dmp upx -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1760 067f07d5d1a520c34cd2d65064ae16e07e388d78e6e15a1921c09dc96436ee8d.exe 1760 067f07d5d1a520c34cd2d65064ae16e07e388d78e6e15a1921c09dc96436ee8d.exe 1760 067f07d5d1a520c34cd2d65064ae16e07e388d78e6e15a1921c09dc96436ee8d.exe 1760 067f07d5d1a520c34cd2d65064ae16e07e388d78e6e15a1921c09dc96436ee8d.exe