Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
145s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
30/12/2023, 21:43
Behavioral task
behavioral1
Sample
1d6367d4a0deb9d410be6b359c7f4dff.exe
Resource
win7-20231129-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
1d6367d4a0deb9d410be6b359c7f4dff.exe
Resource
win10v2004-20231215-en
0 signatures
150 seconds
General
-
Target
1d6367d4a0deb9d410be6b359c7f4dff.exe
-
Size
5.1MB
-
MD5
1d6367d4a0deb9d410be6b359c7f4dff
-
SHA1
a7d2e29de93120a8876760e16fcfa4894c04eb0a
-
SHA256
745b0553570d3f9038fad36ab9ccfd0c8431d7780fcba34996fc6972955f1d16
-
SHA512
fe9961f802f47017fe2170cadcd5e25b3ce54e7a688b2036f417d8f80a7ae5e6619038dc4df46cd0601f09488cb8cef087a07064d8c02414e9eaf33727891e2e
-
SSDEEP
98304:KdfZ9V8z3IavkoIaT14ZdhECN/VYrnIL7eyKYG4SC1Zto:KD96z4acoIaTGZdK+tPveyKs1Zt
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2372-2-0x0000000000400000-0x0000000001132000-memory.dmp themida behavioral1/memory/2372-29-0x0000000000400000-0x0000000001132000-memory.dmp themida behavioral1/memory/2372-31-0x0000000000400000-0x0000000001132000-memory.dmp themida behavioral1/memory/2372-32-0x0000000000400000-0x0000000001132000-memory.dmp themida behavioral1/memory/2372-34-0x0000000000400000-0x0000000001132000-memory.dmp themida behavioral1/memory/2372-35-0x0000000000400000-0x0000000001132000-memory.dmp themida behavioral1/memory/2372-36-0x0000000000400000-0x0000000001132000-memory.dmp themida -
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 2372 1d6367d4a0deb9d410be6b359c7f4dff.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2372 1d6367d4a0deb9d410be6b359c7f4dff.exe