Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
138s -
max time network
161s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
18/08/2023, 22:57
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
yyb4.sp.exe
Resource
win7-20230712-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
yyb4.sp.exe
Resource
win10v2004-20230703-en
1 signatures
150 seconds
General
-
Target
yyb4.sp.exe
-
Size
35.2MB
-
MD5
d7180fa10e17e5e24ada3d43d117a7ea
-
SHA1
a3a3f1e8b701fae85521aa0af6719a216d13757c
-
SHA256
5d76512b41eba12a0ede19c0f1393220b0d524ae9118e0ab766811dd91305abf
-
SHA512
edc54a808b27e68236a6876c0954d6a66a619dc925557b55b572be3fd0c606b6392b8f336da121d2b3404392a0c5c748ba7808165dfb4749063a9b204b1311d6
-
SSDEEP
786432:ynssgnq3EoG5z7tdoaqmGvMq/ygKrDQjx5NjoAnBNWs5an9JdsMizc:yncnq3E30VM7gKr3IBk
Score
1/10
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 30 IoCs
pid Process 4576 yyb4.sp.exe 4576 yyb4.sp.exe 4576 yyb4.sp.exe 4576 yyb4.sp.exe 4576 yyb4.sp.exe 4576 yyb4.sp.exe 4576 yyb4.sp.exe 4576 yyb4.sp.exe 4576 yyb4.sp.exe 4576 yyb4.sp.exe 4576 yyb4.sp.exe 4576 yyb4.sp.exe 4576 yyb4.sp.exe 4576 yyb4.sp.exe 4576 yyb4.sp.exe 4576 yyb4.sp.exe 4576 yyb4.sp.exe 4576 yyb4.sp.exe 4576 yyb4.sp.exe 4576 yyb4.sp.exe 4576 yyb4.sp.exe 4576 yyb4.sp.exe 4576 yyb4.sp.exe 4576 yyb4.sp.exe 4576 yyb4.sp.exe 4576 yyb4.sp.exe 4576 yyb4.sp.exe 4576 yyb4.sp.exe 4576 yyb4.sp.exe 4576 yyb4.sp.exe