Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
140s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
01/02/2024, 20:32
Behavioral task
behavioral1
Sample
f07da46ddc08ea487cc3c9a41545784266fdce2dc3f017434d059abda9d6fe7b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
f07da46ddc08ea487cc3c9a41545784266fdce2dc3f017434d059abda9d6fe7b.exe
Resource
win10v2004-20231215-en
General
-
Target
f07da46ddc08ea487cc3c9a41545784266fdce2dc3f017434d059abda9d6fe7b.exe
-
Size
494KB
-
MD5
b5076895c1d66b99e0cb0144aa2be1df
-
SHA1
cf58c3ec6af954036e91d486af8bd1bf0d1d50c9
-
SHA256
f07da46ddc08ea487cc3c9a41545784266fdce2dc3f017434d059abda9d6fe7b
-
SHA512
53749b58ddb869d03fc04090e7c0aa52c47303313c2219233f6ef42ca450d60866a9606814beba3f9801e761722cb1d54c14b87f3e343ee20c79e1a18ceb351e
-
SSDEEP
12288:j5VdvNQE9tb3wTBv9HVoK1fKVsdak17r980QoS3/Zf:FvNVTofHVo4fYM13987f
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/3052-0-0x0000000000400000-0x0000000000546000-memory.dmp upx behavioral1/memory/3052-1-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/3052-2-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/3052-20-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/3052-18-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/3052-23-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/3052-35-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/3052-46-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/3052-45-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/3052-43-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/3052-41-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/3052-39-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/3052-37-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/3052-33-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/3052-31-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/3052-29-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/3052-27-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/3052-25-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/3052-16-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/3052-14-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/3052-12-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/3052-10-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/3052-8-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/3052-6-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/3052-3-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/3052-4-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/3052-48-0x0000000000400000-0x0000000000546000-memory.dmp upx behavioral1/memory/3052-47-0x0000000000400000-0x0000000000546000-memory.dmp upx behavioral1/memory/3052-49-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/3052-50-0x0000000000400000-0x0000000000546000-memory.dmp upx behavioral1/memory/3052-51-0x0000000000400000-0x0000000000546000-memory.dmp upx behavioral1/memory/3052-52-0x0000000000400000-0x0000000000546000-memory.dmp upx behavioral1/memory/3052-53-0x0000000000400000-0x0000000000546000-memory.dmp upx behavioral1/memory/3052-54-0x0000000000400000-0x0000000000546000-memory.dmp upx behavioral1/memory/3052-55-0x0000000000400000-0x0000000000546000-memory.dmp upx behavioral1/memory/3052-56-0x0000000000400000-0x0000000000546000-memory.dmp upx behavioral1/memory/3052-57-0x0000000000400000-0x0000000000546000-memory.dmp upx behavioral1/memory/3052-58-0x0000000000400000-0x0000000000546000-memory.dmp upx behavioral1/memory/3052-59-0x0000000000400000-0x0000000000546000-memory.dmp upx behavioral1/memory/3052-60-0x0000000000400000-0x0000000000546000-memory.dmp upx behavioral1/memory/3052-61-0x0000000000400000-0x0000000000546000-memory.dmp upx behavioral1/memory/3052-62-0x0000000000400000-0x0000000000546000-memory.dmp upx -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 3052 f07da46ddc08ea487cc3c9a41545784266fdce2dc3f017434d059abda9d6fe7b.exe 3052 f07da46ddc08ea487cc3c9a41545784266fdce2dc3f017434d059abda9d6fe7b.exe 3052 f07da46ddc08ea487cc3c9a41545784266fdce2dc3f017434d059abda9d6fe7b.exe