Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
327s -
max time network
376s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
05/12/2022, 23:34 UTC
General
-
Target
f833aafd3175d277740f24030574050899f576c89bb1697ceff7769907ba3bd5.exe
-
Size
69KB
-
MD5
a969d8dca9f36b7a480213d5a01533b7
-
SHA1
603fd26394038bd9941ffb3cd09848f61af6896c
-
SHA256
f833aafd3175d277740f24030574050899f576c89bb1697ceff7769907ba3bd5
-
SHA512
3cfb62fb94c7f143e9f0ef8b1207d2ede85e892b9ee26d7eaab15cfa7365cdc52be4137c57a801ad4fd46470b516120e8c7ae33c5c02f9db42a2fd5b0c18ed32
-
SSDEEP
768:SzIHvfC6TI/z/2KV60zFn5d9W1xDk9X3j0hUavchzIlIIL7HLdJiS:fHyEI/jJVHFpWJydIF/3
Score
1/10
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f833aafd3175d277740f24030574050899f576c89bb1697ceff7769907ba3bd5.exe"C:\Users\Admin\AppData\Local\Temp\f833aafd3175d277740f24030574050899f576c89bb1697ceff7769907ba3bd5.exe"1⤵
- Suspicious use of SetWindowsHookEx
Network
-
DNSmsh365.comRemote address:8.8.8.8:53Requestmsh365.comIN AResponsemsh365.comIN A34.102.136.180
-
209.197.3.8:80
-
93.184.221.240:80
-
93.184.220.29:80
-
13.69.239.73:443
-
93.184.221.240:80
-
93.184.221.240:80
-
93.184.221.240:80
-
93.184.221.240:80
-
104.80.225.205:443
-
93.184.221.240:80
-
34.102.136.180:80msh365.com
-
8.8.8.8:53msh365.comdns
DNS Request
msh365.com
DNS Response
34.102.136.180