Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
140s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
23/05/2023, 20:11
Behavioral task
behavioral1
Sample
304b0b1682cce719926793b6b5754144cd840da86fea29d5d0d45fd315a34deb.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
304b0b1682cce719926793b6b5754144cd840da86fea29d5d0d45fd315a34deb.exe
Resource
win10v2004-20230220-en
General
-
Target
304b0b1682cce719926793b6b5754144cd840da86fea29d5d0d45fd315a34deb.exe
-
Size
740KB
-
MD5
e33d1fc7349d3f00ed5772dda9e9d150
-
SHA1
5add130d81839a80a10acb234ef497915290ca91
-
SHA256
304b0b1682cce719926793b6b5754144cd840da86fea29d5d0d45fd315a34deb
-
SHA512
9cd7d8081039047f5c8440532e9a4f5058559245d04c8a2bbe936f8bfd4f828b67d96848f52d99bbd9c907e931a25dbb3ebbd9fbfa47cf083c6638604f027310
-
SSDEEP
12288:XRN41aeXnHf+w1v9h1W+UMfw1imZU50UNyP1tHS8yniqBA/ebuNMKL1zbqENS:BN41db1HM+Ugw47xA9BqBA/oU3NS
Malware Config
Signatures
-
Drops file in Windows directory 2 IoCs
description ioc Process File created C:\Windows\ldsm.ini 304b0b1682cce719926793b6b5754144cd840da86fea29d5d0d45fd315a34deb.exe File opened for modification C:\Windows\ldsm.ini 304b0b1682cce719926793b6b5754144cd840da86fea29d5d0d45fd315a34deb.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of SetWindowsHookEx 5 IoCs
pid Process 4232 304b0b1682cce719926793b6b5754144cd840da86fea29d5d0d45fd315a34deb.exe 4232 304b0b1682cce719926793b6b5754144cd840da86fea29d5d0d45fd315a34deb.exe 4232 304b0b1682cce719926793b6b5754144cd840da86fea29d5d0d45fd315a34deb.exe 4232 304b0b1682cce719926793b6b5754144cd840da86fea29d5d0d45fd315a34deb.exe 4232 304b0b1682cce719926793b6b5754144cd840da86fea29d5d0d45fd315a34deb.exe