Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
25/03/2024, 21:58
Static task
static1
Behavioral task
behavioral1
Sample
690ac3fa417a17b5f51a1890e4db362f7caf3c62ab9d21d6b34efe00be2fc47b.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
690ac3fa417a17b5f51a1890e4db362f7caf3c62ab9d21d6b34efe00be2fc47b.exe
Resource
win10v2004-20240226-en
General
-
Target
690ac3fa417a17b5f51a1890e4db362f7caf3c62ab9d21d6b34efe00be2fc47b.exe
-
Size
1.8MB
-
MD5
7d7c460d3fca61fb258b38c5ab5de75e
-
SHA1
3b68d6a1a40c9a787893e60eecb25517603f6437
-
SHA256
690ac3fa417a17b5f51a1890e4db362f7caf3c62ab9d21d6b34efe00be2fc47b
-
SHA512
8fbaf9485171cc5e996f585963e7af35ba8abdd0ef920c68cc2ca127208e0889e4066e6a6546eb23ee00fc8f54e7ded84cd8c14464aa3bdcfeac5556493a7665
-
SSDEEP
49152:6PacL+H5a/EIK3mgdXdG+I+nqVJ33P7Tia:lcL+a/lKWYsCqD3TTia
Malware Config
Signatures
-
Drops file in Program Files directory 4 IoCs
description ioc Process File opened for modification C:\Program Files\Visual Subst 690ac3fa417a17b5f51a1890e4db362f7caf3c62ab9d21d6b34efe00be2fc47b.exe File created C:\Program Files\Visual Subst\__tmp_rar_sfx_access_check_259400209 690ac3fa417a17b5f51a1890e4db362f7caf3c62ab9d21d6b34efe00be2fc47b.exe File created C:\Program Files\Visual Subst\VSubst.exe 690ac3fa417a17b5f51a1890e4db362f7caf3c62ab9d21d6b34efe00be2fc47b.exe File opened for modification C:\Program Files\Visual Subst\VSubst.exe 690ac3fa417a17b5f51a1890e4db362f7caf3c62ab9d21d6b34efe00be2fc47b.exe