Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
83s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
07/01/2023, 23:45
Behavioral task
behavioral1
Sample
b58a2ef01af65d32ca4ba555bd72931dc68728e6d96d8808afca029b4c75d31e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b58a2ef01af65d32ca4ba555bd72931dc68728e6d96d8808afca029b4c75d31e.exe
Resource
win10v2004-20221111-en
General
-
Target
b58a2ef01af65d32ca4ba555bd72931dc68728e6d96d8808afca029b4c75d31e.exe
-
Size
463KB
-
MD5
26510f4fb2778e0abaf07613321259db
-
SHA1
bb0b43b556927f838ddb8365058ddbfdd2be5e57
-
SHA256
b58a2ef01af65d32ca4ba555bd72931dc68728e6d96d8808afca029b4c75d31e
-
SHA512
154e401582f1f038302c5573586f9f82bb8d4a0a669a8b1fc6a42067cb8fb7bc943feb9d3bd4d01c5525ae9b197633850e5e33b673e5c9a67ff7746a91ec8aa0
-
SSDEEP
12288:yOv5jKhsfoPA+yeVKUCUxP4C902bdRtJJPiZ84i31wlEiF4:yq5TfcdHj4fmbfFw+U4
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/4220-132-0x0000000000BE0000-0x0000000000CF9000-memory.dmp upx -
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule behavioral2/memory/4220-132-0x0000000000BE0000-0x0000000000CF9000-memory.dmp autoit_exe