Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
154s -
max time network
167s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
24/11/2022, 05:26
Static task
static1
Behavioral task
behavioral1
Sample
d567dd095462af73246d482b11e4cdc6ae816d75b1c890b2216cfe652f2e1b8a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d567dd095462af73246d482b11e4cdc6ae816d75b1c890b2216cfe652f2e1b8a.exe
Resource
win10v2004-20220812-en
General
-
Target
d567dd095462af73246d482b11e4cdc6ae816d75b1c890b2216cfe652f2e1b8a.exe
-
Size
227KB
-
MD5
bef326b9fe00ec15794a9331c6c703f9
-
SHA1
7ae1413d66f90f4c0eb01b5556f9743a26c4e910
-
SHA256
d567dd095462af73246d482b11e4cdc6ae816d75b1c890b2216cfe652f2e1b8a
-
SHA512
b3f6b397b3ccc9b061e4b7d22337d80dcc884898e41666f937fe7a84e9393e86e7014d75ab75ef40393405fd39c183a400f581d520e61a2bcb5f17d7c620c317
-
SSDEEP
3072:YItu52uqpiMSbggZVyQZVbnYTdHJ0KRuX28PpWE+Fj2a119B6RRRRRRRRRRRRRRS:YMt63bnvZVbYTdHSFpj8X11vWAn
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2280 d567dd095462af73246d482b11e4cdc6ae816d75b1c890b2216cfe652f2e1b8a.exe 2280 d567dd095462af73246d482b11e4cdc6ae816d75b1c890b2216cfe652f2e1b8a.exe