Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
181s -
max time network
136s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
29/12/2023, 21:31
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
047e727e60decb6bdc043d2a3d2339b8.exe
Resource
win7-20231215-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
047e727e60decb6bdc043d2a3d2339b8.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
047e727e60decb6bdc043d2a3d2339b8.exe
-
Size
448KB
-
MD5
047e727e60decb6bdc043d2a3d2339b8
-
SHA1
0366a02c49dae96d1f68851a13666a61ecd799a3
-
SHA256
34a9ec931a64174025d96b1c89a55d8c0b50bd56f292e9ea4f3c0988aa7152d9
-
SHA512
38b4543f78be089c1c5bc4a7a3549b239dd70f33b99a2a07430adf08a3d11734f42a22ecec8316bca804c98803b2f2c9bbc24a76ffb316289cdd97ce9795c56e
-
SSDEEP
12288:wrBh4Fcia8U2qu4CH8LOHBLphwMxSfavHeWGpHv9GQT65:w34FtU23rrbGMbfUFGQTA
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2676-2-0x0000000000400000-0x0000000000479000-memory.dmp upx -
Modifies Control Panel 1 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Control Panel\5761b2dc-ce77-4bfa-b965-6f33b1867cf2 047e727e60decb6bdc043d2a3d2339b8.exe -
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2676 047e727e60decb6bdc043d2a3d2339b8.exe 2676 047e727e60decb6bdc043d2a3d2339b8.exe 2676 047e727e60decb6bdc043d2a3d2339b8.exe 2676 047e727e60decb6bdc043d2a3d2339b8.exe 2676 047e727e60decb6bdc043d2a3d2339b8.exe 2676 047e727e60decb6bdc043d2a3d2339b8.exe 2676 047e727e60decb6bdc043d2a3d2339b8.exe 2676 047e727e60decb6bdc043d2a3d2339b8.exe 2676 047e727e60decb6bdc043d2a3d2339b8.exe 2676 047e727e60decb6bdc043d2a3d2339b8.exe 2676 047e727e60decb6bdc043d2a3d2339b8.exe 2676 047e727e60decb6bdc043d2a3d2339b8.exe 2676 047e727e60decb6bdc043d2a3d2339b8.exe 2676 047e727e60decb6bdc043d2a3d2339b8.exe 2676 047e727e60decb6bdc043d2a3d2339b8.exe 2676 047e727e60decb6bdc043d2a3d2339b8.exe 2676 047e727e60decb6bdc043d2a3d2339b8.exe 2676 047e727e60decb6bdc043d2a3d2339b8.exe 2676 047e727e60decb6bdc043d2a3d2339b8.exe 2676 047e727e60decb6bdc043d2a3d2339b8.exe 2676 047e727e60decb6bdc043d2a3d2339b8.exe 2676 047e727e60decb6bdc043d2a3d2339b8.exe 2676 047e727e60decb6bdc043d2a3d2339b8.exe 2676 047e727e60decb6bdc043d2a3d2339b8.exe 2676 047e727e60decb6bdc043d2a3d2339b8.exe 2676 047e727e60decb6bdc043d2a3d2339b8.exe 2676 047e727e60decb6bdc043d2a3d2339b8.exe 2676 047e727e60decb6bdc043d2a3d2339b8.exe 2676 047e727e60decb6bdc043d2a3d2339b8.exe 2676 047e727e60decb6bdc043d2a3d2339b8.exe 2676 047e727e60decb6bdc043d2a3d2339b8.exe 2676 047e727e60decb6bdc043d2a3d2339b8.exe 2676 047e727e60decb6bdc043d2a3d2339b8.exe 2676 047e727e60decb6bdc043d2a3d2339b8.exe 2676 047e727e60decb6bdc043d2a3d2339b8.exe 2676 047e727e60decb6bdc043d2a3d2339b8.exe 2676 047e727e60decb6bdc043d2a3d2339b8.exe 2676 047e727e60decb6bdc043d2a3d2339b8.exe 2676 047e727e60decb6bdc043d2a3d2339b8.exe 2676 047e727e60decb6bdc043d2a3d2339b8.exe 2676 047e727e60decb6bdc043d2a3d2339b8.exe 2676 047e727e60decb6bdc043d2a3d2339b8.exe 2676 047e727e60decb6bdc043d2a3d2339b8.exe 2676 047e727e60decb6bdc043d2a3d2339b8.exe 2676 047e727e60decb6bdc043d2a3d2339b8.exe 2676 047e727e60decb6bdc043d2a3d2339b8.exe 2676 047e727e60decb6bdc043d2a3d2339b8.exe 2676 047e727e60decb6bdc043d2a3d2339b8.exe 2676 047e727e60decb6bdc043d2a3d2339b8.exe 2676 047e727e60decb6bdc043d2a3d2339b8.exe 2676 047e727e60decb6bdc043d2a3d2339b8.exe 2676 047e727e60decb6bdc043d2a3d2339b8.exe 2676 047e727e60decb6bdc043d2a3d2339b8.exe 2676 047e727e60decb6bdc043d2a3d2339b8.exe 2676 047e727e60decb6bdc043d2a3d2339b8.exe 2676 047e727e60decb6bdc043d2a3d2339b8.exe 2676 047e727e60decb6bdc043d2a3d2339b8.exe 2676 047e727e60decb6bdc043d2a3d2339b8.exe 2676 047e727e60decb6bdc043d2a3d2339b8.exe 2676 047e727e60decb6bdc043d2a3d2339b8.exe 2676 047e727e60decb6bdc043d2a3d2339b8.exe 2676 047e727e60decb6bdc043d2a3d2339b8.exe 2676 047e727e60decb6bdc043d2a3d2339b8.exe 2676 047e727e60decb6bdc043d2a3d2339b8.exe