Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
17/04/2024, 11:11
Static task
static1
Behavioral task
behavioral1
Sample
b9a37c9cb6013a45184c147463513310e617692df7b07dc68e28243b12b47a43.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b9a37c9cb6013a45184c147463513310e617692df7b07dc68e28243b12b47a43.exe
Resource
win10v2004-20240412-en
General
-
Target
b9a37c9cb6013a45184c147463513310e617692df7b07dc68e28243b12b47a43.exe
-
Size
1.1MB
-
MD5
ede1db4f0bde4d036e37c4b59a3d9079
-
SHA1
96677eb5d5e602c00fdd9d9d521a9a40bd6e44e2
-
SHA256
b9a37c9cb6013a45184c147463513310e617692df7b07dc68e28243b12b47a43
-
SHA512
ef1cbb8b11cf7cc9ac74fed00ec755bb2b5340ff81331211b22bdba42b1272e0c8dbbc886b24d8d52558450cf5abd5e41a9913333769fa18f97ecbf104b049a1
-
SSDEEP
24576:xOP4SRAWZvdL2fzykFEvU/4DiV7Avjzm72gsQSUwAKgds1rkjr8xgz2W:x/yk7/bsZAKDkf8xgz
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\cqtools = "C:\\Users\\Admin\\AppData\\Local\\Temp\\´«ÆæÊպſͻ§¶Ë.exe" b9a37c9cb6013a45184c147463513310e617692df7b07dc68e28243b12b47a43.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1988 b9a37c9cb6013a45184c147463513310e617692df7b07dc68e28243b12b47a43.exe 1988 b9a37c9cb6013a45184c147463513310e617692df7b07dc68e28243b12b47a43.exe