Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
26/05/2024, 14:31
Static task
static1
Behavioral task
behavioral1
Sample
23dd1ce50e12d72574858362d3680197b5ce9984379777910f644bdf128a8a81.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
23dd1ce50e12d72574858362d3680197b5ce9984379777910f644bdf128a8a81.exe
Resource
win10v2004-20240426-en
General
-
Target
23dd1ce50e12d72574858362d3680197b5ce9984379777910f644bdf128a8a81.exe
-
Size
780KB
-
MD5
160f8f0500468cbdaec68ed12cdd6bca
-
SHA1
c71ebe5675c3c80ff9c62ecf85eea1e89ab1a950
-
SHA256
23dd1ce50e12d72574858362d3680197b5ce9984379777910f644bdf128a8a81
-
SHA512
97830ee4196e60db14746cfcf85114f8e2d8a781295e8e1174ceae95d901eba82e34ed5d968d0ee8ffc3f464f691d2f2a9b85c5bb9480db8df093e5791bd93da
-
SSDEEP
12288:H403dbjLNmcKgGpoglx+qWDGbuQ7rDNWR5nWFpPoSDF/y4:H4adLNmBlcqUGbu0rhNbB/
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/1736-0-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/1736-1-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/1736-15-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/1736-33-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/1736-4-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/1736-2-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/1736-44-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/1736-41-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/1736-39-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/1736-37-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/1736-35-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/1736-31-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/1736-29-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/1736-27-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/1736-25-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/1736-23-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/1736-21-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/1736-19-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/1736-17-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/1736-13-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/1736-11-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/1736-8-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/1736-6-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/1736-45-0x0000000010000000-0x000000001003E000-memory.dmp upx -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1736 23dd1ce50e12d72574858362d3680197b5ce9984379777910f644bdf128a8a81.exe 1736 23dd1ce50e12d72574858362d3680197b5ce9984379777910f644bdf128a8a81.exe 1736 23dd1ce50e12d72574858362d3680197b5ce9984379777910f644bdf128a8a81.exe