Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
142s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
25/12/2023, 11:07
Behavioral task
behavioral1
Sample
1992ef66e7e5f893ed9007da61b2a0af.exe
Resource
win7-20231215-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
1992ef66e7e5f893ed9007da61b2a0af.exe
Resource
win10v2004-20231215-en
2 signatures
150 seconds
General
-
Target
1992ef66e7e5f893ed9007da61b2a0af.exe
-
Size
385KB
-
MD5
1992ef66e7e5f893ed9007da61b2a0af
-
SHA1
3917f95e76f745e1da327d92ca79fd61b77b96d0
-
SHA256
57cdc92e55e1b8485c6d1918ae96e1760d84e3e28be8fe134521155da3a60595
-
SHA512
ac16901391bf675d040295c18134a3776f30043d6d1355b93ba5c42c23a540124ec374b3bc545d5139bcd80a59b0611473c93c6abbc350fe0f02502373367c95
-
SSDEEP
12288:6QTL3b3NwGo1lsXKNp4plzM/B6sJOkZ86EI:OhlsaNp43A56sJR8TI
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/1992-0-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1992-10-0x0000000000400000-0x000000000041E000-memory.dmp upx -
description ioc Process Key created \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Main 1992ef66e7e5f893ed9007da61b2a0af.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1992 1992ef66e7e5f893ed9007da61b2a0af.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1992 1992ef66e7e5f893ed9007da61b2a0af.exe 1992 1992ef66e7e5f893ed9007da61b2a0af.exe