Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
140s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
08/04/2024, 12:58
Behavioral task
behavioral1
Sample
1312e26a300ed6f57aa3fa7a85ed8c70ef449d4d436496a9bbc5311071158058.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1312e26a300ed6f57aa3fa7a85ed8c70ef449d4d436496a9bbc5311071158058.exe
Resource
win10v2004-20240226-en
General
-
Target
1312e26a300ed6f57aa3fa7a85ed8c70ef449d4d436496a9bbc5311071158058.exe
-
Size
292KB
-
MD5
53ddfbdc875187aff5ffebf66653262e
-
SHA1
df77de2756f5fa94d87722ff57592ff4cec55e1a
-
SHA256
1312e26a300ed6f57aa3fa7a85ed8c70ef449d4d436496a9bbc5311071158058
-
SHA512
6a3feffa566db6bebe25d582e93bf0ac0638e75f91605b6125fda333aea5d4c49b4a9c813fb155710359e90c851aac2a9e70b129b65384138b89cd05c86ab0e5
-
SSDEEP
6144:SVIOYwltR7B0OtRgN6UfxValiC0/cNBbTjnQB68nWttctHLx4fwhmSUeXW:KIOY4r5c6MXaPb5nQB6wWttcVSqo
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2100-0-0x0000000000D60000-0x0000000000E30000-memory.dmp upx behavioral1/memory/2100-1-0x0000000000D60000-0x0000000000E30000-memory.dmp upx behavioral1/memory/2100-3-0x0000000000D60000-0x0000000000E30000-memory.dmp upx behavioral1/memory/2100-5-0x0000000000D60000-0x0000000000E30000-memory.dmp upx behavioral1/memory/2100-6-0x0000000000D60000-0x0000000000E30000-memory.dmp upx behavioral1/memory/2100-8-0x0000000000D60000-0x0000000000E30000-memory.dmp upx behavioral1/memory/2100-9-0x0000000000D60000-0x0000000000E30000-memory.dmp upx -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2100 1312e26a300ed6f57aa3fa7a85ed8c70ef449d4d436496a9bbc5311071158058.exe 2100 1312e26a300ed6f57aa3fa7a85ed8c70ef449d4d436496a9bbc5311071158058.exe 2100 1312e26a300ed6f57aa3fa7a85ed8c70ef449d4d436496a9bbc5311071158058.exe 2100 1312e26a300ed6f57aa3fa7a85ed8c70ef449d4d436496a9bbc5311071158058.exe 2100 1312e26a300ed6f57aa3fa7a85ed8c70ef449d4d436496a9bbc5311071158058.exe 2100 1312e26a300ed6f57aa3fa7a85ed8c70ef449d4d436496a9bbc5311071158058.exe