Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
63s -
max time network
30s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system -
submitted
11/05/2023, 12:44
Static task
static1
Behavioral task
behavioral1
Sample
unknown.zip
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
unknown.zip
Resource
win10v2004-20230221-en
Behavioral task
behavioral3
Sample
Setup.exe
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
Setup.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
plugins/NppConverter/NppConverter.dll
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
plugins/NppConverter/NppConverter.dll
Resource
win10v2004-20230221-en
General
-
Target
Setup.exe
-
Size
6.3MB
-
MD5
2eaf48c0835a05b81e918b882f161abc
-
SHA1
76394bbc329a3fcf4f390cd51e5b7b1d03b97bf0
-
SHA256
a559ec6a8b7951551b1e10943326a9a7c585181acf91cf4ef267b2bde9b8173c
-
SHA512
b482c58c4d4f2760729c62d52a29f12ff66ad0841e44abdfbb7414c586e5dce6fb8eddb868ac9c38f2fb94d29d8da927cff7220119ca60d4a4c8b6a77a8ee4d1
-
SSDEEP
49152:WeBNiVuyf8RRkoSuQsAjKmKEGyjIT6xyU45/ahrvcgEOpXzvCGpKJ0vnQFUbnekE:5cVqRpTV/ALxrRYuDLWBy3MLXNYO/mol
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1620 Setup.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1620 Setup.exe