Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
08/10/2023, 10:07
Static task
static1
Behavioral task
behavioral1
Sample
49410a135fa7aa42b23ac4ef33240494e25dfa134c7e3b66702c7c5e50ac35e3.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
49410a135fa7aa42b23ac4ef33240494e25dfa134c7e3b66702c7c5e50ac35e3.exe
Resource
win10v2004-20230915-en
General
-
Target
49410a135fa7aa42b23ac4ef33240494e25dfa134c7e3b66702c7c5e50ac35e3.exe
-
Size
1.2MB
-
MD5
0d94e53a084813d410a67ed82e88ecc0
-
SHA1
0ff6fe32d022d4c30ac11040019338c33383512c
-
SHA256
49410a135fa7aa42b23ac4ef33240494e25dfa134c7e3b66702c7c5e50ac35e3
-
SHA512
03270745d7ece3a65b89618264cb802d58b97dfd34087eee245de894f0966c0b32b8c20b4c83712ebc9b18e0a159a5b88096981a1c483d109d0c4573c3c2ddb4
-
SSDEEP
24576:bMAuTggXbVy1IllCOPkaXjq57xBDFXsoDdnWbNfZr:bMzlBjq5GinW3
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2712-9-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2712-11-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2712-12-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2712-14-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2712-17-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2712-19-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2712-24-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2712-26-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2712-31-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2712-35-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2712-37-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2712-41-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2712-45-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2712-43-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2712-48-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2712-39-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2712-53-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2712-58-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2712-56-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2712-51-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2712-33-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2712-29-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2712-22-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2712-15-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2712-13-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2712-61-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2712-62-0x0000000010000000-0x000000001003E000-memory.dmp upx -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2712 49410a135fa7aa42b23ac4ef33240494e25dfa134c7e3b66702c7c5e50ac35e3.exe 2712 49410a135fa7aa42b23ac4ef33240494e25dfa134c7e3b66702c7c5e50ac35e3.exe 2712 49410a135fa7aa42b23ac4ef33240494e25dfa134c7e3b66702c7c5e50ac35e3.exe