Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
143s -
max time network
161s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
25/12/2023, 20:51
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3c4f2d35ab0af2dd18fdd7da190964ef.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
3c4f2d35ab0af2dd18fdd7da190964ef.exe
Resource
win10v2004-20231215-en
3 signatures
150 seconds
General
-
Target
3c4f2d35ab0af2dd18fdd7da190964ef.exe
-
Size
21KB
-
MD5
3c4f2d35ab0af2dd18fdd7da190964ef
-
SHA1
10a7feb37350f2b183e5989cbfbf4c17ddcb68e1
-
SHA256
56ccec7a8ff1f6de0b315fc6a93423760c63af6255742e6cc0017e2a99cf10df
-
SHA512
8a0b836cc6685911b9d4500534fb55bb3ab1a76afb8a1ae8fb824d15f2fb4a2928789f8958a32c3b31a1cf95c8e489710187a6fd1fab157eb0eb83ad6ed421ee
-
SSDEEP
384:F6Qn1vi+5RdqaUglxnplTnGT22vYoHCIUrdFL5EVXD5w+7wQzsc/bpEojE0:F6tGR28ptGT22vYoHCIwFEVNlJrEoj
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 2 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Windows\CurrentVersion\Run\61b29af7.exe = "C:\\Users\\Admin\\AppData\\Local\\61b29af7.exe" 3c4f2d35ab0af2dd18fdd7da190964ef.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\61b29af7.exe = "C:\\Windows\\system32\\61b29af7.exe" 3c4f2d35ab0af2dd18fdd7da190964ef.exe -
Drops file in System32 directory 1 IoCs
description ioc Process File created C:\Windows\SysWOW64\61b29af7.exe 3c4f2d35ab0af2dd18fdd7da190964ef.exe