Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
94s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
01/12/2022, 08:46
General
-
Target
699ca387f1ca3b2aabbbbc3d864f7c15b4aaa3e2b410c892e24b4d32b674dae6.exe
-
Size
84KB
-
MD5
97660b130c07660451bade4a9dc38646
-
SHA1
935e8dadaa2f02ff22a2b62a353d57ad4059750e
-
SHA256
699ca387f1ca3b2aabbbbc3d864f7c15b4aaa3e2b410c892e24b4d32b674dae6
-
SHA512
260c71ac1de617e9a48b1707d2f52b1395f37bcfbd074d6db29400fe853b1e4d72f61d35e9f4f54a43c71c81a5286c2ee18fddfd34a23f64ef58517b648e6ca4
-
SSDEEP
1536:qwm8nBjqs32bxPpBRy32Z6gJlyiKqVo6EUT:5m8nBjTmbxRBRN6WYiKqVo6ZT
Score
4/10
Malware Config
Signatures
-
Drops file in Windows directory 4 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Windows\Explorer.EXEC:\Windows\Explorer.EXE1⤵
-
C:\Users\Admin\AppData\Local\Temp\699ca387f1ca3b2aabbbbc3d864f7c15b4aaa3e2b410c892e24b4d32b674dae6.exe"C:\Users\Admin\AppData\Local\Temp\699ca387f1ca3b2aabbbbc3d864f7c15b4aaa3e2b410c892e24b4d32b674dae6.exe"2⤵
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-