Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

NEAS.59170...30.exe

windows7-x64

1

NEAS.59170...30.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    140s
  • max time network
    146s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231020-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22/10/2023, 17:19

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    NEAS.59170c7a5c8607e88f72530bdff96630.exe

  • Size

    88KB

  • MD5

    59170c7a5c8607e88f72530bdff96630

  • SHA1

    6cfa8455e2e0e031cb17a0df9b93a2c18c645e76

  • SHA256

    e68088ef256fe5459e108f5579b656ae4152979a212d40bd2508ff99b5beba76

  • SHA512

    e29e142b82bf65c5a6e6633c0ad1d1035d3e777d703e4303324ad84dc1bdb6542e0a44940d457f08d79691579726f8cec181156f4ebeb11e1dbfc442a913414f

  • SSDEEP

    1536:Tk1JCXf3l9izMfUBRq/YxiLv/OXXRXMMGBkyJMjZROYJT3bQghxHCZin:TNf3wRqQxKv/YRcaC8n

Score
1/10

Malware Config

Signatures

  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SendNotifyMessage 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\NEAS.59170c7a5c8607e88f72530bdff96630.exe
    "C:\Users\Admin\AppData\Local\Temp\NEAS.59170c7a5c8607e88f72530bdff96630.exe"
    1⤵
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    PID:4160

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4160-0-0x0000000000400000-0x0000000000417000-memory.dmp

    Filesize

    92KB

    Download

  • memory/4160-1-0x0000000000400000-0x0000000000417000-memory.dmp

    Filesize

    92KB

    Download

  • memory/4160-2-0x0000000000400000-0x0000000000417000-memory.dmp

    Filesize

    92KB

    Download