Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
163s -
max time network
195s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
29/11/2022, 12:33
Static task
static1
Behavioral task
behavioral1
Sample
fbb8e022a111482f20fc03b17c378ad06fda9a2009409b79769c10e2fb0a6bf9.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
fbb8e022a111482f20fc03b17c378ad06fda9a2009409b79769c10e2fb0a6bf9.exe
Resource
win10v2004-20221111-en
General
-
Target
fbb8e022a111482f20fc03b17c378ad06fda9a2009409b79769c10e2fb0a6bf9.exe
-
Size
6.0MB
-
MD5
5d915c8d1604ea32b3576b603d6b1e0b
-
SHA1
e4d49bffb744a5c67ef648a7295af1eaa9046b16
-
SHA256
fbb8e022a111482f20fc03b17c378ad06fda9a2009409b79769c10e2fb0a6bf9
-
SHA512
9b43110ac7181c55ae6858e30975ad7d650858d7679995689fd955bea8de260fa7a9f180db20dd7e6b1fe9024e237ba898dd6f563d518688b582f6a0222d2638
-
SSDEEP
98304:UEGUyyLCC6MY0Ey3am3OWH6jThemTGtowp55CD9i4nBKP6I:QFZz9yqm33ajTcZ2wp5MImBKP6I
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 4992 fbb8e022a111482f20fc03b17c378ad06fda9a2009409b79769c10e2fb0a6bf9.exe 4992 fbb8e022a111482f20fc03b17c378ad06fda9a2009409b79769c10e2fb0a6bf9.exe 4992 fbb8e022a111482f20fc03b17c378ad06fda9a2009409b79769c10e2fb0a6bf9.exe 4992 fbb8e022a111482f20fc03b17c378ad06fda9a2009409b79769c10e2fb0a6bf9.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4992 fbb8e022a111482f20fc03b17c378ad06fda9a2009409b79769c10e2fb0a6bf9.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\fbb8e022a111482f20fc03b17c378ad06fda9a2009409b79769c10e2fb0a6bf9.exe"C:\Users\Admin\AppData\Local\Temp\fbb8e022a111482f20fc03b17c378ad06fda9a2009409b79769c10e2fb0a6bf9.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:4992