Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
27/01/2024, 05:45
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
796d7b1934e23131acf7d42199020586.exe
Resource
win7-20231215-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
796d7b1934e23131acf7d42199020586.exe
Resource
win10v2004-20231222-en
4 signatures
150 seconds
General
-
Target
796d7b1934e23131acf7d42199020586.exe
-
Size
418KB
-
MD5
796d7b1934e23131acf7d42199020586
-
SHA1
7a6ac6c44b489c9fa269a859ff4a70c50c68c846
-
SHA256
bd57459a2f276b92b03f6c1a9302bb5f8b6f4b902301be3557f182b5cad960d8
-
SHA512
ca3d3fd1f963b3529db396ecd2e3537a09f603f3faca3ec7aaa167c563ac0a5065962dd08f7fabb6644f6490e1d93438361fc567c36a9adcaff9bef3e61b2883
-
SSDEEP
12288:sY5Ymqw/87Z2ljexOX8E5AY4mof/O3oqYiQB:sY5Ymqq87ZG2OmnFW3pT
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\EstrwuD = "C:\\Users\\Admin\\AppData\\Local\\Temp\\796d7b1934e23131acf7d42199020586.exe" 796d7b1934e23131acf7d42199020586.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2508 796d7b1934e23131acf7d42199020586.exe -
Suspicious behavior: RenamesItself 1 IoCs
pid Process 2508 796d7b1934e23131acf7d42199020586.exe