Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
137s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
24/09/2023, 00:05
Static task
static1
Behavioral task
behavioral1
Sample
11ad47d5017fdc1c36277116d4e7ff58e54ecec3f4d45eb18ee5fc2c53d4e862.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
11ad47d5017fdc1c36277116d4e7ff58e54ecec3f4d45eb18ee5fc2c53d4e862.exe
Resource
win10v2004-20230915-en
General
-
Target
11ad47d5017fdc1c36277116d4e7ff58e54ecec3f4d45eb18ee5fc2c53d4e862.exe
-
Size
1.4MB
-
MD5
1b90a6d258272d9739ddcba2b7c263fb
-
SHA1
6ea9357b26b59df7a662cceb053aa3e53765721b
-
SHA256
11ad47d5017fdc1c36277116d4e7ff58e54ecec3f4d45eb18ee5fc2c53d4e862
-
SHA512
e09247d2655d8122b70908cf56f1622efcb0fd33c3c22f05ef722d08367f5a7c7e834e7dc915c14296de24918b86f3b00b30ff7e58afd1c7fe1651b7739734c8
-
SSDEEP
24576:CO/3+0DCvcDPkHqgFjBSfEqt0iIApt5bhT+Y:CED8qg1rqtxz5F9
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/1536-7-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/1536-6-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/1536-8-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/1536-9-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/1536-11-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/1536-13-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/1536-15-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/1536-17-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/1536-19-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/1536-21-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/1536-23-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/1536-25-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/1536-27-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/1536-29-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/1536-32-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/1536-34-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/1536-36-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/1536-38-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/1536-40-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/1536-42-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/1536-44-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/1536-46-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/1536-48-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/1536-50-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/1536-51-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/1536-52-0x0000000010000000-0x000000001003E000-memory.dmp upx -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 1536 11ad47d5017fdc1c36277116d4e7ff58e54ecec3f4d45eb18ee5fc2c53d4e862.exe 1536 11ad47d5017fdc1c36277116d4e7ff58e54ecec3f4d45eb18ee5fc2c53d4e862.exe 1536 11ad47d5017fdc1c36277116d4e7ff58e54ecec3f4d45eb18ee5fc2c53d4e862.exe 1536 11ad47d5017fdc1c36277116d4e7ff58e54ecec3f4d45eb18ee5fc2c53d4e862.exe 1536 11ad47d5017fdc1c36277116d4e7ff58e54ecec3f4d45eb18ee5fc2c53d4e862.exe 1536 11ad47d5017fdc1c36277116d4e7ff58e54ecec3f4d45eb18ee5fc2c53d4e862.exe