Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
117s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
25/06/2024, 12:31
Static task
static1
Behavioral task
behavioral1
Sample
181848170c1a9915a59061420a54312fdd58846ef5b0f076dad2afa3d5d67a5b.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
181848170c1a9915a59061420a54312fdd58846ef5b0f076dad2afa3d5d67a5b.exe
Resource
win10v2004-20240226-en
General
-
Target
181848170c1a9915a59061420a54312fdd58846ef5b0f076dad2afa3d5d67a5b.exe
-
Size
1.1MB
-
MD5
9b3d1d31fd111cde59a122b405666ca4
-
SHA1
25a21edbaa7d0f23f3555f5186153a98241e2305
-
SHA256
181848170c1a9915a59061420a54312fdd58846ef5b0f076dad2afa3d5d67a5b
-
SHA512
60ccfb9804b65ee4d7c4c89911f3d67fe6772d198dd9d3ed228621d538defa336aea978e14f9d5cdaa5562ba53cf94d7b5f06ae081439ed2849302210079d68f
-
SSDEEP
24576:ncU1F7exXs9rJCiLO71wqWS/lff1RjIRt9RZ+SNaG3vC:nrv7eYJCiLO71bWS/li/+FaC
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1652 181848170c1a9915a59061420a54312fdd58846ef5b0f076dad2afa3d5d67a5b.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1652 181848170c1a9915a59061420a54312fdd58846ef5b0f076dad2afa3d5d67a5b.exe 1652 181848170c1a9915a59061420a54312fdd58846ef5b0f076dad2afa3d5d67a5b.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\181848170c1a9915a59061420a54312fdd58846ef5b0f076dad2afa3d5d67a5b.exe"C:\Users\Admin\AppData\Local\Temp\181848170c1a9915a59061420a54312fdd58846ef5b0f076dad2afa3d5d67a5b.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1652