Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

1

Static

static

【软件�...12.exe

windows7-x64

1

【软件�...12.exe

windows10-2004-x64

1

样本号码.xlsx

windows7-x64

1

样本号码.xlsx

windows10-2004-x64

1

Analysis

  • max time kernel
    162s
  • max time network
    192s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07/11/2022, 09:28

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    【软件】批量号码导入手机通讯录软件-T12.exe

  • Size

    251KB

  • MD5

    5b04d91672718ce825a41b667d8e0fde

  • SHA1

    6e5165a104273de8cbf1b6466eb2a15c23936a3e

  • SHA256

    114e453077d58fec75d741ecc40ad892342b03604a963b260ed3bc41c7837249

  • SHA512

    2f95951c2bf3dff1108b198a6ab7d59ec57db4f0e6a1c874720a187d36a5a7f46f8205396cf6c172d0488a9204d63dea419f6cfc69ee9a34d802ee0062c548db

  • SSDEEP

    6144:ZX6Gwkkkkkkkkkkkkkkkkkkko21u1kqkqkqkwEd:lRwiuK7771d

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\【软件】批量号码导入手机通讯录软件-T12.exe
    "C:\Users\Admin\AppData\Local\Temp\【软件】批量号码导入手机通讯录软件-T12.exe"
    1⤵
      PID:5008

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/5008-132-0x00000000001F0000-0x0000000000236000-memory.dmp

      Filesize

      280KB

      Download

    • memory/5008-133-0x00007FF997050000-0x00007FF997B11000-memory.dmp

      Filesize

      10.8MB

      Download

    • memory/5008-134-0x00007FF997050000-0x00007FF997B11000-memory.dmp

      Filesize

      10.8MB

      Download