Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
144s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
23/09/2023, 03:56
General
-
Target
29aee23288ce67edee6a0396c3885bf1d28af85c5e2218553ad8d2e979fae365.exe
-
Size
3.4MB
-
MD5
ad21070ef2a7e533c2fe19ac7065c4e8
-
SHA1
304c4402490851922b38262bb04e1716d486eb73
-
SHA256
29aee23288ce67edee6a0396c3885bf1d28af85c5e2218553ad8d2e979fae365
-
SHA512
0a950b9dfffda1e45f77f2d949397a1860967d2d6ed800c1f05e9f8db124159a2845db973fe072fa5e3bf28c54ee539ac4895a300542baf1a749750070f433df
-
SSDEEP
49152:OMe/a0+EJB28NKnV7S5l8H7Ub6niD1M2DipBSdJqr:5e/hHX28NKnV7S5l8H7UuiD1/ipBSc
Score
10/10
Malware Config
Signatures
-
UAC bypass 3 TTPs 1 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SendNotifyMessage 1 IoCs
-
Suspicious use of SetWindowsHookEx 5 IoCs
-
System policy modification 1 TTPs 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\29aee23288ce67edee6a0396c3885bf1d28af85c5e2218553ad8d2e979fae365.exe"C:\Users\Admin\AppData\Local\Temp\29aee23288ce67edee6a0396c3885bf1d28af85c5e2218553ad8d2e979fae365.exe"1⤵
- UAC bypass
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
- System policy modification