Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
24/01/2024, 13:42
Static task
static1
Behavioral task
behavioral1
Sample
654097da7c500da970c4029601461ea7da3dd6913cdca7233d827cc3bdb765ea.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
654097da7c500da970c4029601461ea7da3dd6913cdca7233d827cc3bdb765ea.exe
Resource
win10v2004-20231222-en
General
-
Target
654097da7c500da970c4029601461ea7da3dd6913cdca7233d827cc3bdb765ea.exe
-
Size
1.1MB
-
MD5
ac4f55a67b2cd5e4340247737ac911cf
-
SHA1
f029b80d1d438b4bb4ed1eff0ed76adb80d5c744
-
SHA256
654097da7c500da970c4029601461ea7da3dd6913cdca7233d827cc3bdb765ea
-
SHA512
45ff0075115284089a1ec9152dcb86814e33c394b6e6f4cb4cf88d79284028b6f3f968a2e684aa67b8067862e39c5597f93555d454c95a226046cacbed86bba9
-
SSDEEP
24576:ncU1F7exXs9rJCiLO71wqWS/lff1RjIRt9RZ+yNaG3vC:nrv7eYJCiLO71bWS/li/+laC
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2528 654097da7c500da970c4029601461ea7da3dd6913cdca7233d827cc3bdb765ea.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2528 654097da7c500da970c4029601461ea7da3dd6913cdca7233d827cc3bdb765ea.exe 2528 654097da7c500da970c4029601461ea7da3dd6913cdca7233d827cc3bdb765ea.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\654097da7c500da970c4029601461ea7da3dd6913cdca7233d827cc3bdb765ea.exe"C:\Users\Admin\AppData\Local\Temp\654097da7c500da970c4029601461ea7da3dd6913cdca7233d827cc3bdb765ea.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2528