Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-es -
resource tags
arch:x64arch:x86image:win10v2004-20220812-eslocale:es-esos:windows10-2004-x64systemwindows -
submitted
06/02/2023, 16:27
Static task
static1
Behavioral task
behavioral1
Sample
HackTheGame121.zip
Resource
win10v2004-20220812-es
1 signatures
150 seconds
General
-
Target
HackTheGame121.zip
-
Size
1.1MB
-
MD5
8ac886ed7823b74c84861077b5fde6a9
-
SHA1
83f6f36269abda4d2cd3d047d47acf6b72d4109f
-
SHA256
d6292010c9b014922b6b47a83b47ffa8ab0e3ccf52db918b98c7145b46c95af5
-
SHA512
60c4fa30a3d2b3cb7f683bb2dd1c0d1ba93193dfbb11554d79c2b8317acfa827278070920b4436f4bc865019fee87ef5acb0456acd7ef303babfe527628c4c76
-
SSDEEP
24576:dJ/wt/6jluilPQK0Jy+Yb5f3NYDPwQuP7gV5FICIjUaA1mxToUXdVVv:d6UjluilYK9bd3NYDoQ5FZFKo6xv
Score
1/10
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3244 HackTheGame.exe
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\HackTheGame121.zip1⤵PID:4392
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:4376
-
C:\Users\Admin\Desktop\HackTheGame121\HackTheGame.exe"C:\Users\Admin\Desktop\HackTheGame121\HackTheGame.exe"1⤵
- Suspicious use of SetWindowsHookEx
PID:3244