Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
141s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
05/03/2024, 09:48
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
b465d4149b222efd54d5333ddac6de06.exe
Resource
win7-20240221-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
b465d4149b222efd54d5333ddac6de06.exe
Resource
win10v2004-20240226-en
1 signatures
150 seconds
General
-
Target
b465d4149b222efd54d5333ddac6de06.exe
-
Size
2.6MB
-
MD5
b465d4149b222efd54d5333ddac6de06
-
SHA1
ac925d6fad4195bd09e269356283adecef777fba
-
SHA256
5c0795950171a3b8ffadf1f526bdc0cf23f8f67ba5d4ef2b58799684af83aed9
-
SHA512
2babe412fe69cab00c1796f56fbce3a15cbcc273038a1d4db807b3bf3d9ff48778c43374d293594c8c6de1edd57351ac181cdc7f84b407c92d594977098c0ca5
-
SSDEEP
49152:rHdn0SKngrgY87T+CD6GbUTbyyFF15MyueiXmDz6R0:xKY876OnayyFey0mD2R
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RUN\FFITER = "C:\\Users\\Admin\\AppData\\Local\\Temp\\b465d4149b222efd54d5333ddac6de06.exe" b465d4149b222efd54d5333ddac6de06.exe