Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
142s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
28/02/2024, 09:54
Static task
static1
Behavioral task
behavioral1
Sample
ab9bc1f4736be834f5b2d11fbd1455f5.exe
Resource
win7-20240221-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
ab9bc1f4736be834f5b2d11fbd1455f5.exe
Resource
win10v2004-20240226-en
0 signatures
150 seconds
General
-
Target
ab9bc1f4736be834f5b2d11fbd1455f5.exe
-
Size
739KB
-
MD5
ab9bc1f4736be834f5b2d11fbd1455f5
-
SHA1
42c0e1402d23afbdbdc89c08f9ba8096d0dc3e22
-
SHA256
23a38b36e62cd6133e6b52be8bd28e68f8a41ead41f4cffe8dac7ed190806233
-
SHA512
4c7396b2bfb2cafd5e91164fcf0fbadb7656cbdffb8947860401556594e46006f3cd969d1a6ddf231d79f798466947dcfadab6ca9d5b17a311283562af8a4867
-
SSDEEP
12288:JFy44kHzp1zBWmuKyKn/zh9fe0qYrB3bU0S:Jh4kHzvuAXfYy3bU0S
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
pid Process 1876 ab9bc1f4736be834f5b2d11fbd1455f5.exe -
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 1876 ab9bc1f4736be834f5b2d11fbd1455f5.exe 1876 ab9bc1f4736be834f5b2d11fbd1455f5.exe 1876 ab9bc1f4736be834f5b2d11fbd1455f5.exe 1876 ab9bc1f4736be834f5b2d11fbd1455f5.exe 1876 ab9bc1f4736be834f5b2d11fbd1455f5.exe 1876 ab9bc1f4736be834f5b2d11fbd1455f5.exe 1876 ab9bc1f4736be834f5b2d11fbd1455f5.exe 1876 ab9bc1f4736be834f5b2d11fbd1455f5.exe 1876 ab9bc1f4736be834f5b2d11fbd1455f5.exe 1876 ab9bc1f4736be834f5b2d11fbd1455f5.exe 1876 ab9bc1f4736be834f5b2d11fbd1455f5.exe 1876 ab9bc1f4736be834f5b2d11fbd1455f5.exe 1876 ab9bc1f4736be834f5b2d11fbd1455f5.exe 1876 ab9bc1f4736be834f5b2d11fbd1455f5.exe 1876 ab9bc1f4736be834f5b2d11fbd1455f5.exe 1876 ab9bc1f4736be834f5b2d11fbd1455f5.exe 1876 ab9bc1f4736be834f5b2d11fbd1455f5.exe 1876 ab9bc1f4736be834f5b2d11fbd1455f5.exe 1876 ab9bc1f4736be834f5b2d11fbd1455f5.exe 1876 ab9bc1f4736be834f5b2d11fbd1455f5.exe 1876 ab9bc1f4736be834f5b2d11fbd1455f5.exe 1876 ab9bc1f4736be834f5b2d11fbd1455f5.exe 1876 ab9bc1f4736be834f5b2d11fbd1455f5.exe 1876 ab9bc1f4736be834f5b2d11fbd1455f5.exe 1876 ab9bc1f4736be834f5b2d11fbd1455f5.exe 1876 ab9bc1f4736be834f5b2d11fbd1455f5.exe 1876 ab9bc1f4736be834f5b2d11fbd1455f5.exe 1876 ab9bc1f4736be834f5b2d11fbd1455f5.exe 1876 ab9bc1f4736be834f5b2d11fbd1455f5.exe 1876 ab9bc1f4736be834f5b2d11fbd1455f5.exe 1876 ab9bc1f4736be834f5b2d11fbd1455f5.exe 1876 ab9bc1f4736be834f5b2d11fbd1455f5.exe 1876 ab9bc1f4736be834f5b2d11fbd1455f5.exe 1876 ab9bc1f4736be834f5b2d11fbd1455f5.exe 1876 ab9bc1f4736be834f5b2d11fbd1455f5.exe 1876 ab9bc1f4736be834f5b2d11fbd1455f5.exe 1876 ab9bc1f4736be834f5b2d11fbd1455f5.exe 1876 ab9bc1f4736be834f5b2d11fbd1455f5.exe 1876 ab9bc1f4736be834f5b2d11fbd1455f5.exe 1876 ab9bc1f4736be834f5b2d11fbd1455f5.exe 1876 ab9bc1f4736be834f5b2d11fbd1455f5.exe 1876 ab9bc1f4736be834f5b2d11fbd1455f5.exe 1876 ab9bc1f4736be834f5b2d11fbd1455f5.exe 1876 ab9bc1f4736be834f5b2d11fbd1455f5.exe 1876 ab9bc1f4736be834f5b2d11fbd1455f5.exe 1876 ab9bc1f4736be834f5b2d11fbd1455f5.exe 1876 ab9bc1f4736be834f5b2d11fbd1455f5.exe 1876 ab9bc1f4736be834f5b2d11fbd1455f5.exe 1876 ab9bc1f4736be834f5b2d11fbd1455f5.exe 1876 ab9bc1f4736be834f5b2d11fbd1455f5.exe 1876 ab9bc1f4736be834f5b2d11fbd1455f5.exe 1876 ab9bc1f4736be834f5b2d11fbd1455f5.exe 1876 ab9bc1f4736be834f5b2d11fbd1455f5.exe 1876 ab9bc1f4736be834f5b2d11fbd1455f5.exe 1876 ab9bc1f4736be834f5b2d11fbd1455f5.exe 1876 ab9bc1f4736be834f5b2d11fbd1455f5.exe 1876 ab9bc1f4736be834f5b2d11fbd1455f5.exe 1876 ab9bc1f4736be834f5b2d11fbd1455f5.exe 1876 ab9bc1f4736be834f5b2d11fbd1455f5.exe 1876 ab9bc1f4736be834f5b2d11fbd1455f5.exe 1876 ab9bc1f4736be834f5b2d11fbd1455f5.exe 1876 ab9bc1f4736be834f5b2d11fbd1455f5.exe 1876 ab9bc1f4736be834f5b2d11fbd1455f5.exe 1876 ab9bc1f4736be834f5b2d11fbd1455f5.exe