Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
142s -
max time network
179s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
26/11/2022, 00:45
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe
Resource
win7-20220812-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe
Resource
win10v2004-20221111-en
windows10-2004-x64
5 signatures
150 seconds
General
-
Target
a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe
-
Size
1.9MB
-
MD5
56868e22bdfacb562743c819b13757ed
-
SHA1
0c4a07d04b9c671ca18ea187ee1053adf2a4df85
-
SHA256
a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a
-
SHA512
f9c6823a828c9bc536d2c72aed402cc1d16ca7854f14e5b77a7b1a6dace9ed6a4f45ba85d74d1a849da195ce5796997cfa38dcc6effcfece25337c3f41e8ec3b
-
SSDEEP
49152:LVg5tQ7aQis5P7kuXMkV07sgjlSAPIiUr9G:Bg561PMkV6wAPIiU4
Score
5/10
Malware Config
Signatures
-
Suspicious use of SetThreadContext 1 IoCs
description pid Process procid_target PID 360 set thread context of 220 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 85 -
Suspicious use of FindShellTrayWindow 35 IoCs
pid Process 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe -
Suspicious use of SendNotifyMessage 35 IoCs
pid Process 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 220 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 220 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe -
Suspicious use of WriteProcessMemory 5 IoCs
description pid Process procid_target PID 360 wrote to memory of 220 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 85 PID 360 wrote to memory of 220 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 85 PID 360 wrote to memory of 220 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 85 PID 360 wrote to memory of 220 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 85 PID 360 wrote to memory of 220 360 a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe 85
Processes
-
C:\Users\Admin\AppData\Local\Temp\a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe"C:\Users\Admin\AppData\Local\Temp\a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:360 -
C:\Users\Admin\AppData\Local\Temp\a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe"C:\Users\Admin\AppData\Local\Temp\a5aa175632338857ae12b9718eac9560f48cdcdceb114f7c7c05a774a15bdd8a.exe"2⤵
- Suspicious use of SetWindowsHookEx
PID:220
-