Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
29/12/2023, 18:37
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
00afbf06609753e9a59d30b7daff6e6a.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
00afbf06609753e9a59d30b7daff6e6a.exe
Resource
win10v2004-20231215-en
3 signatures
150 seconds
General
-
Target
00afbf06609753e9a59d30b7daff6e6a.exe
-
Size
1.2MB
-
MD5
00afbf06609753e9a59d30b7daff6e6a
-
SHA1
c6e05cc2430a762b097e3b8e9e81481af78b4c8a
-
SHA256
3a0380e8e892f1b69161343f09e0ffbf198d2403fdc62bd84f18b8841f7380de
-
SHA512
7f4f5ecd5d78bf71934ff0b346f0fa5c8c65caf13a72950d8ba042454cb30460166cf56ab21ce582252ac1e03c12d6a069415ed96b4d7f648c4ae49481c6bd24
-
SSDEEP
24576:Wmj6SpYCnR3dK57UGGMdNQMFoaSMwCVlbML9AbsJ0pKz/:8SpYCnRo7DrdpblwgbML7+4/
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/1096-2-0x0000000000400000-0x00000000005E0000-memory.dmp upx behavioral1/memory/1096-4-0x0000000000400000-0x00000000005E0000-memory.dmp upx -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1096 00afbf06609753e9a59d30b7daff6e6a.exe 1096 00afbf06609753e9a59d30b7daff6e6a.exe 1096 00afbf06609753e9a59d30b7daff6e6a.exe