Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
304s -
max time network
318s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
01/12/2022, 08:37
General
-
Target
cb60974faf01397ca8559f27e5d6b7260ad3d90a3690c00cd50593199aa86b25.exe
-
Size
84KB
-
MD5
cba70926e3c2b4d1811c9bb51d4eade8
-
SHA1
6dde434a5d3361862af42c2a793e8fb7f2c39363
-
SHA256
cb60974faf01397ca8559f27e5d6b7260ad3d90a3690c00cd50593199aa86b25
-
SHA512
9508337303ba109b29dc992391b7fa11e98e21dce38177538e394b97b113418c15f1459092f11fe8e856115364fb6730cb7b1efe2fd9c3433fa345dbbd8fce92
-
SSDEEP
1536:qwm8nBjqs32bxPpBRy32Z6gJlyiKqVo6EUN:5m8nBjTmbxRBRN6WYiKqVo6ZN
Score
4/10
Malware Config
Signatures
-
Drops file in Windows directory 4 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Windows\Explorer.EXEC:\Windows\Explorer.EXE1⤵
-
C:\Users\Admin\AppData\Local\Temp\cb60974faf01397ca8559f27e5d6b7260ad3d90a3690c00cd50593199aa86b25.exe"C:\Users\Admin\AppData\Local\Temp\cb60974faf01397ca8559f27e5d6b7260ad3d90a3690c00cd50593199aa86b25.exe"2⤵
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-