Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
112s -
max time network
129s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
-
submitted
03/12/2022, 06:09
General
-
Target
7532961559966671c5ec8d2d64b7ab6c9e23705a4dfeb254f7fa9338fa8a523e.exe
-
Size
52KB
-
MD5
0d5e17110e0d086bf27f6577bb43d0cf
-
SHA1
5b9cc386780ec7c1d1c8c487d74d91d3ea1df86c
-
SHA256
7532961559966671c5ec8d2d64b7ab6c9e23705a4dfeb254f7fa9338fa8a523e
-
SHA512
eedeb836388b91b168b216ff8132c89c3a9e29410a36cbd5841c7031e9d750827f1c45f8ac89f3b04b4c79f23f34a401af38d197f2c8eda0701deee782a24228
-
SSDEEP
1536:r3yofy3aqV2GrRJEz372E+NIrU6XUSLxccs:r3HfyKqV2GrRJET3U+1bs
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of WriteProcessMemory 8 IoCs
Processes
-
C:\Windows\Explorer.EXEC:\Windows\Explorer.EXE1⤵
-
C:\Users\Admin\AppData\Local\Temp\7532961559966671c5ec8d2d64b7ab6c9e23705a4dfeb254f7fa9338fa8a523e.exe"C:\Users\Admin\AppData\Local\Temp\7532961559966671c5ec8d2d64b7ab6c9e23705a4dfeb254f7fa9338fa8a523e.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
-