Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
139s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20230824-en -
resource tags
arch:x64arch:x86image:win10v2004-20230824-enlocale:en-usos:windows10-2004-x64system -
submitted
27/08/2023, 21:40
Static task
static1
Behavioral task
behavioral1
Sample
13a8a0290b104fde5758abe13cd11affa21883cdd9cc9d6c6508887961520582.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
13a8a0290b104fde5758abe13cd11affa21883cdd9cc9d6c6508887961520582.exe
Resource
win10v2004-20230824-en
General
-
Target
13a8a0290b104fde5758abe13cd11affa21883cdd9cc9d6c6508887961520582.exe
-
Size
3.2MB
-
MD5
a0acf0d931e0d268b40b9e6883b017d7
-
SHA1
1e8a1055d4ea8836e3ff79b03aa609157bb22034
-
SHA256
13a8a0290b104fde5758abe13cd11affa21883cdd9cc9d6c6508887961520582
-
SHA512
7a6a52279d1bb884fde0fbc56931cbeb1647f75022218395d89dea07141d90b96f995a87b8c6d67a3a739f27d21b2694bd1af531abfd8ad3db9fe7c3ea432a36
-
SSDEEP
49152:y4abpvNITTinggggMwxX9l/2KHbSf8o/+8pZ29SQKP/hBmmjH+vDTQ8x:yoT2FXj/2KH+fm8pgngh7HW
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 8 IoCs
pid Process 2164 13a8a0290b104fde5758abe13cd11affa21883cdd9cc9d6c6508887961520582.exe 2164 13a8a0290b104fde5758abe13cd11affa21883cdd9cc9d6c6508887961520582.exe 2164 13a8a0290b104fde5758abe13cd11affa21883cdd9cc9d6c6508887961520582.exe 2164 13a8a0290b104fde5758abe13cd11affa21883cdd9cc9d6c6508887961520582.exe 2164 13a8a0290b104fde5758abe13cd11affa21883cdd9cc9d6c6508887961520582.exe 2164 13a8a0290b104fde5758abe13cd11affa21883cdd9cc9d6c6508887961520582.exe 2164 13a8a0290b104fde5758abe13cd11affa21883cdd9cc9d6c6508887961520582.exe 2164 13a8a0290b104fde5758abe13cd11affa21883cdd9cc9d6c6508887961520582.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2164 13a8a0290b104fde5758abe13cd11affa21883cdd9cc9d6c6508887961520582.exe 2164 13a8a0290b104fde5758abe13cd11affa21883cdd9cc9d6c6508887961520582.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\13a8a0290b104fde5758abe13cd11affa21883cdd9cc9d6c6508887961520582.exe"C:\Users\Admin\AppData\Local\Temp\13a8a0290b104fde5758abe13cd11affa21883cdd9cc9d6c6508887961520582.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:2164