Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
147s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
26/01/2024, 01:59
Behavioral task
behavioral1
Sample
76172a1526f041b9747964ba2dbabab1.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
76172a1526f041b9747964ba2dbabab1.exe
Resource
win10v2004-20231222-en
2 signatures
150 seconds
General
-
Target
76172a1526f041b9747964ba2dbabab1.exe
-
Size
459KB
-
MD5
76172a1526f041b9747964ba2dbabab1
-
SHA1
025f1c7a2d9478344b69dd9c455e6191a466d1a1
-
SHA256
6fe127e345ebdc27220064d424f5708d9f466fa50348312708b1cca7d30a7d59
-
SHA512
b2fd9c168a8fd69fb9c816787d99cc9a37f37db59f3928dd78b70cbee0bc6946f65296fb69dbcd4a9e07a464fabc1ffbab3232c5f3671744242160eca67889ac
-
SSDEEP
12288:fXb1TjQ+p3rbNuqsDBFBygivAIKMV4qljNk2oSR:fXbrp3rbER9rNpIKW4qJWo
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/1216-0-0x0000000000400000-0x0000000000599000-memory.dmp upx behavioral1/memory/1216-2-0x0000000000400000-0x0000000000599000-memory.dmp upx behavioral1/memory/1216-5-0x0000000000400000-0x0000000000599000-memory.dmp upx -
Suspicious behavior: EnumeratesProcesses 30 IoCs
pid Process 1216 76172a1526f041b9747964ba2dbabab1.exe 1216 76172a1526f041b9747964ba2dbabab1.exe 1216 76172a1526f041b9747964ba2dbabab1.exe 1216 76172a1526f041b9747964ba2dbabab1.exe 1216 76172a1526f041b9747964ba2dbabab1.exe 1216 76172a1526f041b9747964ba2dbabab1.exe 1216 76172a1526f041b9747964ba2dbabab1.exe 1216 76172a1526f041b9747964ba2dbabab1.exe 1216 76172a1526f041b9747964ba2dbabab1.exe 1216 76172a1526f041b9747964ba2dbabab1.exe 1216 76172a1526f041b9747964ba2dbabab1.exe 1216 76172a1526f041b9747964ba2dbabab1.exe 1216 76172a1526f041b9747964ba2dbabab1.exe 1216 76172a1526f041b9747964ba2dbabab1.exe 1216 76172a1526f041b9747964ba2dbabab1.exe 1216 76172a1526f041b9747964ba2dbabab1.exe 1216 76172a1526f041b9747964ba2dbabab1.exe 1216 76172a1526f041b9747964ba2dbabab1.exe 1216 76172a1526f041b9747964ba2dbabab1.exe 1216 76172a1526f041b9747964ba2dbabab1.exe 1216 76172a1526f041b9747964ba2dbabab1.exe 1216 76172a1526f041b9747964ba2dbabab1.exe 1216 76172a1526f041b9747964ba2dbabab1.exe 1216 76172a1526f041b9747964ba2dbabab1.exe 1216 76172a1526f041b9747964ba2dbabab1.exe 1216 76172a1526f041b9747964ba2dbabab1.exe 1216 76172a1526f041b9747964ba2dbabab1.exe 1216 76172a1526f041b9747964ba2dbabab1.exe 1216 76172a1526f041b9747964ba2dbabab1.exe 1216 76172a1526f041b9747964ba2dbabab1.exe