Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
27/03/2024, 22:43
Behavioral task
behavioral1
Sample
Injector_warehub_1.exe
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral2
Sample
Injector_warehub_1.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral3
Sample
out.exe
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral4
Sample
out.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
General
-
Target
Injector_warehub_1.exe
-
Size
288KB
-
MD5
d098c0bf1c83217584e2e38734627a7f
-
SHA1
4902792181f976bdc8f76f80a42a13d7f34d5714
-
SHA256
ad6e7b84ce21f9670bf8f0a2a980d72363d06ae7213cc495ba9e88fa6da2f511
-
SHA512
ff75c6c334f8e542beeff11464dabbc320bd2b980d2021e6123e9d1f33f4d57fc8fded93280b5c96d91564636222931177bb6d98ea60400612fdc7dd3e9deb44
-
SSDEEP
6144:5/mdjrF9mqUh9C0zA+C/gEMS9WhaCtHhBDuZsGZe2KL8:5/mXTs7SAaqGZf
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/1260-0-0x000000013F930000-0x000000013F9C6000-memory.dmp upx behavioral1/memory/1260-2-0x000000013F930000-0x000000013F9C6000-memory.dmp upx -
Drops file in Windows directory 1 IoCs
description ioc Process File created C:\Windows\IME\warehub.dll Injector_warehub_1.exe -
Suspicious behavior: EnumeratesProcesses 51 IoCs
pid Process 1260 Injector_warehub_1.exe 1260 Injector_warehub_1.exe 1260 Injector_warehub_1.exe 1260 Injector_warehub_1.exe 1260 Injector_warehub_1.exe 1260 Injector_warehub_1.exe 1260 Injector_warehub_1.exe 1260 Injector_warehub_1.exe 1260 Injector_warehub_1.exe 1260 Injector_warehub_1.exe 1260 Injector_warehub_1.exe 1260 Injector_warehub_1.exe 1260 Injector_warehub_1.exe 1260 Injector_warehub_1.exe 1260 Injector_warehub_1.exe 1260 Injector_warehub_1.exe 1260 Injector_warehub_1.exe 1260 Injector_warehub_1.exe 1260 Injector_warehub_1.exe 1260 Injector_warehub_1.exe 1260 Injector_warehub_1.exe 1260 Injector_warehub_1.exe 1260 Injector_warehub_1.exe 1260 Injector_warehub_1.exe 1260 Injector_warehub_1.exe 1260 Injector_warehub_1.exe 1260 Injector_warehub_1.exe 1260 Injector_warehub_1.exe 1260 Injector_warehub_1.exe 1260 Injector_warehub_1.exe 1260 Injector_warehub_1.exe 1260 Injector_warehub_1.exe 1260 Injector_warehub_1.exe 1260 Injector_warehub_1.exe 1260 Injector_warehub_1.exe 1260 Injector_warehub_1.exe 1260 Injector_warehub_1.exe 1260 Injector_warehub_1.exe 1260 Injector_warehub_1.exe 1260 Injector_warehub_1.exe 1260 Injector_warehub_1.exe 1260 Injector_warehub_1.exe 1260 Injector_warehub_1.exe 1260 Injector_warehub_1.exe 1260 Injector_warehub_1.exe 1260 Injector_warehub_1.exe 1260 Injector_warehub_1.exe 1260 Injector_warehub_1.exe 1260 Injector_warehub_1.exe 1260 Injector_warehub_1.exe 1260 Injector_warehub_1.exe