Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
19/03/2024, 02:04
Static task
static1
Behavioral task
behavioral1
Sample
10432d2c9e3f65eb672a79de639fd2afe35a38ef3de49bdb12d1f0c2712e483d.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
10432d2c9e3f65eb672a79de639fd2afe35a38ef3de49bdb12d1f0c2712e483d.exe
Resource
win10v2004-20240226-en
General
-
Target
10432d2c9e3f65eb672a79de639fd2afe35a38ef3de49bdb12d1f0c2712e483d.exe
-
Size
499KB
-
MD5
577c84b48375cd25b1a42c8b7cd08f62
-
SHA1
9bc20af58c4b1c0d20e7670dfa3ae315709e748d
-
SHA256
10432d2c9e3f65eb672a79de639fd2afe35a38ef3de49bdb12d1f0c2712e483d
-
SHA512
6dd0a805f194c49abcdc48d3f5eb47d8f3ce3389f6a0e69df956560107cdb8cfa96e42782a5796eccd96a65af27438f44a28636541ad6eb20ae57c5be1bbf1d8
-
SSDEEP
12288:/5dpUvt4snXViwOByWYdJNp4mIAYgM8JoRlRFOQaOww4GB:/5dOlLXTs6JNjhYgnoRljOXgB
Malware Config
Signatures
-
Detects executables manipulated with Fody 3 IoCs
resource yara_rule behavioral1/memory/2700-0-0x0000000000840000-0x00000000008C4000-memory.dmp INDICATOR_EXE_Packed_Fody behavioral1/memory/2700-2-0x0000000002250000-0x00000000022D0000-memory.dmp INDICATOR_EXE_Packed_Fody behavioral1/memory/2700-4-0x00000000004D0000-0x00000000004E2000-memory.dmp INDICATOR_EXE_Packed_Fody