Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system -
submitted
17/08/2023, 20:07
Static task
static1
Behavioral task
behavioral1
Sample
66c3200d2f79524d0d0e01248a8f431249b678cc9b893067a37a7312e1128410.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
66c3200d2f79524d0d0e01248a8f431249b678cc9b893067a37a7312e1128410.exe
Resource
win10v2004-20230703-en
General
-
Target
66c3200d2f79524d0d0e01248a8f431249b678cc9b893067a37a7312e1128410.exe
-
Size
13.0MB
-
MD5
d663aadd2ec44fb8271e829503dde439
-
SHA1
0e27299a2902f3a4469758be16cc90ce1e582c96
-
SHA256
66c3200d2f79524d0d0e01248a8f431249b678cc9b893067a37a7312e1128410
-
SHA512
354a06bca4091c2d61a1a40ff5fe273b4d1ae2095c8d78009ac1dcccf6df86a672dbb15fbf7d9d2cc2d28edcad6376c6990b92cc0664bf3f4a5fd6c1f196908c
-
SSDEEP
196608:ZAHabVK0+Gw5s8aH0pFAHqolDYTrkgxEFdEJV2:uHcVKYw5naH8eHlDsWdEm
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 2636 66c3200d2f79524d0d0e01248a8f431249b678cc9b893067a37a7312e1128410.exe -
resource yara_rule behavioral1/memory/2636-57-0x0000000010000000-0x00000000105A1000-memory.dmp upx behavioral1/memory/2636-58-0x0000000010000000-0x00000000105A1000-memory.dmp upx behavioral1/memory/2636-60-0x0000000010000000-0x00000000105A1000-memory.dmp upx behavioral1/memory/2636-59-0x0000000010000000-0x00000000105A1000-memory.dmp upx behavioral1/memory/2636-62-0x0000000010000000-0x00000000105A1000-memory.dmp upx behavioral1/memory/2636-61-0x0000000010000000-0x00000000105A1000-memory.dmp upx behavioral1/memory/2636-64-0x0000000010000000-0x00000000105A1000-memory.dmp upx -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2636 66c3200d2f79524d0d0e01248a8f431249b678cc9b893067a37a7312e1128410.exe 2636 66c3200d2f79524d0d0e01248a8f431249b678cc9b893067a37a7312e1128410.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.6MB
MD53ea488a82fba1995e5d25b8a076389dd
SHA125c597347e9dd839778bb3d13db08787d63c518a
SHA25666a2ffa3d87640746a66b0d59d81a53b52b17a10f3b1a85f3193e33d59eb0cd6
SHA512df29c219d040be58d94dd46ed90d00141b4111dd00a01045eb45752463d33cca8167147b035ab7a4e09d64b753579978bbc08d72881ad723adafa79f01da88d2