Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
24/12/2023, 17:11
Behavioral task
behavioral1
Sample
07aec06ee735dda73c12f33ddd46e829.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
07aec06ee735dda73c12f33ddd46e829.exe
Resource
win10v2004-20231215-en
General
-
Target
07aec06ee735dda73c12f33ddd46e829.exe
-
Size
730KB
-
MD5
07aec06ee735dda73c12f33ddd46e829
-
SHA1
a11a1ab8d717fab01c6c465b6e3b8d9294318053
-
SHA256
863ecab84ed07995d7f32a59b423ddd9290199f7542e2ea95231f39f66d68aea
-
SHA512
140fb93369edc95eec34654537ffeee0d337d6a64ea32d269c4d4823fc5b4ed3ec3e12d416c7e77a6193533f4f382c5ef7bc6fbacda72952a8c60e8868fb321d
-
SSDEEP
12288:36SKqT31T6WpJY6V765jKqostkm3eGkb8TnNi6YW7PweGb:qxqT31T6WE6I5jKqosOmHkb4om7PweGb
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2752-0-0x0000000000400000-0x00000000004A0000-memory.dmp upx behavioral1/memory/2752-1-0x0000000000400000-0x00000000004A0000-memory.dmp upx -
AutoIT Executable 2 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule behavioral1/memory/2752-0-0x0000000000400000-0x00000000004A0000-memory.dmp autoit_exe behavioral1/memory/2752-1-0x0000000000400000-0x00000000004A0000-memory.dmp autoit_exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).