Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
144s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
03/10/2024, 15:06
Static task
static1
Behavioral task
behavioral1
Sample
Clumsy 0.4 V2/WinDivert.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Clumsy 0.4 V2/WinDivert.dll
Resource
win10v2004-20240910-en
Behavioral task
behavioral3
Sample
Clumsy 0.4 V2/clumsy.exe
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
Clumsy 0.4 V2/clumsy.exe
Resource
win10v2004-20240802-en
General
-
Target
Clumsy 0.4 V2/clumsy.exe
-
Size
1.4MB
-
MD5
6bcd94737d341808b9cd9d94c2b7cb40
-
SHA1
be0c84763260c350a93ca144092c15d09b213d0a
-
SHA256
adac971c4859d71b9189a6ecac25fedb4a3b5df7224462fac03a23f5a4ebde6f
-
SHA512
2dd2a16309063851599089865ea225cdd58e9568202679127e90d797d159657504253ffbab1400ce35a523f23e39a9721b75de7229cf5bc5de3177dd2794a518
-
SSDEEP
24576:odQOhDsVixFXYn36mjH0gRqH9RcEhqsUst:oJYViI36mjnR0cE0sUst
Malware Config
Signatures
-
Suspicious behavior: LoadsDriver 23 IoCs
pid Process 480 Process not Found 480 Process not Found 480 Process not Found 480 Process not Found 480 Process not Found 480 Process not Found 480 Process not Found 480 Process not Found 480 Process not Found 480 Process not Found 480 Process not Found 480 Process not Found 480 Process not Found 480 Process not Found 480 Process not Found 480 Process not Found 480 Process not Found 480 Process not Found 480 Process not Found 480 Process not Found 480 Process not Found 480 Process not Found 480 Process not Found