Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
10Static
static
1猪八戒�...cx.lnk
windows7-x64
10猪八戒�...cx.lnk
windows10-2004-x64
10猪八戒�...33.vbs
windows7-x64
10猪八戒�...33.vbs
windows10-2004-x64
10猪八戒�...es.dll
windows7-x64
3猪八戒�...es.dll
windows10-2004-x64
3猪八戒�.../pp.py
windows7-x64
3猪八戒�.../pp.py
windows10-2004-x64
3猪八戒�...on.exe
windows7-x64
1猪八戒�...on.exe
windows10-2004-x64
1猪八戒�...37.dll
windows7-x64
3猪八戒�...37.dll
windows10-2004-x64
3猪八戒�...�.docx
windows7-x64
4猪八戒�...�.docx
windows10-2004-x64
1Analysis
-
max time kernel
142s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
16/08/2023, 07:52
Static task
static1
Behavioral task
behavioral1
Sample
猪八戒股份有限公司-需求/猪八戒股份有限公司-需求.docx.lnk
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
猪八戒股份有限公司-需求/猪八戒股份有限公司-需求.docx.lnk
Resource
win10v2004-20230703-en
Behavioral task
behavioral3
Sample
猪八戒股份有限公司-需求/营业执照/.__MACOS__/.__MACOS__/._MACOS_/333.vbs
Resource
win7-20230712-en
Behavioral task
behavioral4
Sample
猪八戒股份有限公司-需求/营业执照/.__MACOS__/.__MACOS__/._MACOS_/333.vbs
Resource
win10v2004-20230703-en
Behavioral task
behavioral5
Sample
猪八戒股份有限公司-需求/营业执照/.__MACOS__/.__MACOS__/._MACOS_/_ctypes.dll
Resource
win7-20230712-en
Behavioral task
behavioral6
Sample
猪八戒股份有限公司-需求/营业执照/.__MACOS__/.__MACOS__/._MACOS_/_ctypes.dll
Resource
win10v2004-20230703-en
Behavioral task
behavioral7
Sample
猪八戒股份有限公司-需求/营业执照/.__MACOS__/.__MACOS__/._MACOS_/pp.py
Resource
win7-20230712-en
Behavioral task
behavioral8
Sample
猪八戒股份有限公司-需求/营业执照/.__MACOS__/.__MACOS__/._MACOS_/pp.py
Resource
win10v2004-20230703-en
Behavioral task
behavioral9
Sample
猪八戒股份有限公司-需求/营业执照/.__MACOS__/.__MACOS__/._MACOS_/python.exe
Resource
win7-20230712-en
Behavioral task
behavioral10
Sample
猪八戒股份有限公司-需求/营业执照/.__MACOS__/.__MACOS__/._MACOS_/python.exe
Resource
win10v2004-20230703-en
Behavioral task
behavioral11
Sample
猪八戒股份有限公司-需求/营业执照/.__MACOS__/.__MACOS__/._MACOS_/python37.dll
Resource
win7-20230712-en
Behavioral task
behavioral12
Sample
猪八戒股份有限公司-需求/营业执照/.__MACOS__/.__MACOS__/._MACOS_/python37.dll
Resource
win10v2004-20230703-en
Behavioral task
behavioral13
Sample
猪八戒股份有限公司-需求/营业执照/.__MACOS__/猪八戒股份有限公司需求.docx
Resource
win7-20230712-en
Behavioral task
behavioral14
Sample
猪八戒股份有限公司-需求/营业执照/.__MACOS__/猪八戒股份有限公司需求.docx
Resource
win10v2004-20230703-en
General
-
Target
猪八戒股份有限公司-需求/营业执照/.__MACOS__/.__MACOS__/._MACOS_/python.exe
-
Size
97KB
-
MD5
60794b301a482407276712acfeaaec06
-
SHA1
21bcb2fa08ab9b17bbbfc57a33877a15448e04a8
-
SHA256
c33cbae201fb0791988cf5c26ce8d0f98b3cf213aca3765c8cf79f00e9c7a8ec
-
SHA512
a06939779741c025ec11c1f7d9bd5678b5452099a471234ed4df8722c0942007a48eb0ecc4032d32ac970359646bccc3d1b6db6f2f77310fd4a68a7cfcadbea5
-
SSDEEP
1536:lwvhKbuEYE+9z2wp+FavGmhMn+IhzZtzs/AXRjyPx:lwvhKbuAs0FNmhMn+IhNW/AXROx
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: 35 2176 python.exe