Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
142s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
19/09/2023, 10:43
Static task
static1
Behavioral task
behavioral1
Sample
0c2ec1489204e20a3d521667cc204d36083fca291dd033a1958d300852e55395.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
0c2ec1489204e20a3d521667cc204d36083fca291dd033a1958d300852e55395.exe
Resource
win10v2004-20230915-en
General
-
Target
0c2ec1489204e20a3d521667cc204d36083fca291dd033a1958d300852e55395.exe
-
Size
9.7MB
-
MD5
48889e96bdcf9cdb5161e8895c258ff2
-
SHA1
dded2715a5c9dc20e6b5ffbcceb50004a5ea039c
-
SHA256
0c2ec1489204e20a3d521667cc204d36083fca291dd033a1958d300852e55395
-
SHA512
9525eef3620037895d8978a5cd5ee99c028dc59b6c79429464db72519f0f3e91508988dcb462e9a7fc2f90b829f4dc53ffd48f569611f7dc4dc550664c61eeb9
-
SSDEEP
98304:AznxO9Np9cmsdO1ttTxGHCoJKmvkUI0dV2NBeqX+g4:AzxOnp9cmsQ1ttUCoJKmvqQV2L9U
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 3680 0c2ec1489204e20a3d521667cc204d36083fca291dd033a1958d300852e55395.exe 3680 0c2ec1489204e20a3d521667cc204d36083fca291dd033a1958d300852e55395.exe 3680 0c2ec1489204e20a3d521667cc204d36083fca291dd033a1958d300852e55395.exe 3680 0c2ec1489204e20a3d521667cc204d36083fca291dd033a1958d300852e55395.exe