Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
07/02/2023, 07:04
Behavioral task
behavioral1
Sample
19a7598edfcc14c4acc8d5dba7faffc740f6c9828ef116712e03ec60f89e1fe8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
19a7598edfcc14c4acc8d5dba7faffc740f6c9828ef116712e03ec60f89e1fe8.exe
Resource
win10v2004-20220812-en
General
-
Target
19a7598edfcc14c4acc8d5dba7faffc740f6c9828ef116712e03ec60f89e1fe8.exe
-
Size
1.8MB
-
MD5
b903f690bf05bfdba7df69e7d100a97c
-
SHA1
57373f06f158e606aa02c1088a5d77a98ce8e229
-
SHA256
19a7598edfcc14c4acc8d5dba7faffc740f6c9828ef116712e03ec60f89e1fe8
-
SHA512
5238969be2504c035a788742e75818b66839f9e511173d39b1eac378e82af2d369ef593b313c1c777e31bcac72938b34408f194953369b52022407603882b49c
-
SSDEEP
24576:FGs+pUfQj/VwaRteqqajEKafzpLa45VAH6C6a2FntJS+u3DJRUNZ3ThXB+4uqUo:FGYXBa2SGtJFmerMDo
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/4856-132-0x00000000027A0000-0x00000000027D6000-memory.dmp upx behavioral2/memory/4856-134-0x00000000027A0000-0x00000000027D6000-memory.dmp upx -
Suspicious behavior: RenamesItself 1 IoCs
pid Process 4856 19a7598edfcc14c4acc8d5dba7faffc740f6c9828ef116712e03ec60f89e1fe8.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4856 19a7598edfcc14c4acc8d5dba7faffc740f6c9828ef116712e03ec60f89e1fe8.exe