Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
65s -
max time network
143s -
platform
windows10_x64 -
resource
win10 -
submitted
18/07/2020, 08:51
Static task
static1
Behavioral task
behavioral1
Sample
260781321ff664579d2264e81dd00f22bccf99f3d6e4af826ec57c331cb9ab56.exe
Resource
win7
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
260781321ff664579d2264e81dd00f22bccf99f3d6e4af826ec57c331cb9ab56.exe
Resource
win10
0 signatures
0 seconds
General
-
Target
260781321ff664579d2264e81dd00f22bccf99f3d6e4af826ec57c331cb9ab56.exe
-
Size
273KB
-
MD5
10dbce85c4bead4dc34a4280a4ba8876
-
SHA1
93b125cc8e2b7f054ba721c7a09940e3d1dc61aa
-
SHA256
260781321ff664579d2264e81dd00f22bccf99f3d6e4af826ec57c331cb9ab56
-
SHA512
1bc67ded5441be1ea142fae7d24ca66c9f046ccb1d73c0600e6897569c77cc972fe0bd01a03c9bfc1f8df85cb3f5bb92a73e037a082c05744d0d0653eb0c9eb3
Score
1/10
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2976 260781321ff664579d2264e81dd00f22bccf99f3d6e4af826ec57c331cb9ab56.exe 2976 260781321ff664579d2264e81dd00f22bccf99f3d6e4af826ec57c331cb9ab56.exe -
Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 2976 260781321ff664579d2264e81dd00f22bccf99f3d6e4af826ec57c331cb9ab56.exe 2976 260781321ff664579d2264e81dd00f22bccf99f3d6e4af826ec57c331cb9ab56.exe 2976 260781321ff664579d2264e81dd00f22bccf99f3d6e4af826ec57c331cb9ab56.exe 2976 260781321ff664579d2264e81dd00f22bccf99f3d6e4af826ec57c331cb9ab56.exe 2976 260781321ff664579d2264e81dd00f22bccf99f3d6e4af826ec57c331cb9ab56.exe 2976 260781321ff664579d2264e81dd00f22bccf99f3d6e4af826ec57c331cb9ab56.exe -
Suspicious behavior: EmotetMutantsSpam 1 IoCs
pid Process 2976 260781321ff664579d2264e81dd00f22bccf99f3d6e4af826ec57c331cb9ab56.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\260781321ff664579d2264e81dd00f22bccf99f3d6e4af826ec57c331cb9ab56.exe"C:\Users\Admin\AppData\Local\Temp\260781321ff664579d2264e81dd00f22bccf99f3d6e4af826ec57c331cb9ab56.exe"1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: EmotetMutantsSpam
PID:2976