Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231020-en -
resource tags
arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system -
submitted
15/11/2023, 18:05
Static task
static1
Behavioral task
behavioral1
Sample
44a70767e0178fa6b84b7af800857f4d73fbb1b54c6a8296b2071c83c25370c0.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
44a70767e0178fa6b84b7af800857f4d73fbb1b54c6a8296b2071c83c25370c0.exe
Resource
win10v2004-20231023-en
General
-
Target
44a70767e0178fa6b84b7af800857f4d73fbb1b54c6a8296b2071c83c25370c0.exe
-
Size
1.9MB
-
MD5
75dca23086475c84e4c23b7299dc0772
-
SHA1
272ca07a335193a389e35fba3ec1695fc1545783
-
SHA256
44a70767e0178fa6b84b7af800857f4d73fbb1b54c6a8296b2071c83c25370c0
-
SHA512
fa7045a5eef07956393758dda0f266cef095dbca5876a8024e3127538721b8fe1e1e7ec8dec7b650d2478d977d2fd0dc3f772cbbb3adea888602eb1a92fe87a0
-
SSDEEP
24576:O8/2jQW0RiDMPm4NkNnJV7OcUSVU97CjYyxN5+oQW/288sBXeeKALV7TyvVqP51X:GjQW+iCmukufUU9O/xN52wZnK24qP51X
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
pid Process 2932 44a70767e0178fa6b84b7af800857f4d73fbb1b54c6a8296b2071c83c25370c0.exe 2932 44a70767e0178fa6b84b7af800857f4d73fbb1b54c6a8296b2071c83c25370c0.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2932 44a70767e0178fa6b84b7af800857f4d73fbb1b54c6a8296b2071c83c25370c0.exe 2932 44a70767e0178fa6b84b7af800857f4d73fbb1b54c6a8296b2071c83c25370c0.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\44a70767e0178fa6b84b7af800857f4d73fbb1b54c6a8296b2071c83c25370c0.exe"C:\Users\Admin\AppData\Local\Temp\44a70767e0178fa6b84b7af800857f4d73fbb1b54c6a8296b2071c83c25370c0.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetWindowsHookEx
PID:2932