Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
146s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20231020-en -
resource tags
arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system -
submitted
03/11/2023, 14:46
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
NEAS.e5fdc979ade79e64dbc1df61fad99880_JC.exe
Resource
win7-20231020-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
NEAS.e5fdc979ade79e64dbc1df61fad99880_JC.exe
Resource
win10v2004-20231023-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
NEAS.e5fdc979ade79e64dbc1df61fad99880_JC.exe
-
Size
199KB
-
MD5
e5fdc979ade79e64dbc1df61fad99880
-
SHA1
9cacddf52eddbab1d5d4e12a4a2faab99c6a6947
-
SHA256
756234c3389c629258a186225bc4adc6a66d4160de24dc486e09a55d9fba3f8c
-
SHA512
1093481a0120ff85a3b1e54880a4121b7771b4cf38e18798594d218956e0c29e6a18b1cbe86cfd98cac5d47735d25b2e0da4d2593c3f638084bb62fd032e3cc9
-
SSDEEP
3072:LlritbPvxNwiVUdh/e68qQ1r0lMqLi7TSlLqVm5G8FK0y6R4i5DhZlIah/TmbLDq:L1itNvV0Y6OreMqLKT0SEO6RDpanL
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2880 NEAS.e5fdc979ade79e64dbc1df61fad99880_JC.exe -
Suspicious use of FindShellTrayWindow 31 IoCs
pid Process 2880 NEAS.e5fdc979ade79e64dbc1df61fad99880_JC.exe 2880 NEAS.e5fdc979ade79e64dbc1df61fad99880_JC.exe 2880 NEAS.e5fdc979ade79e64dbc1df61fad99880_JC.exe 2880 NEAS.e5fdc979ade79e64dbc1df61fad99880_JC.exe 2880 NEAS.e5fdc979ade79e64dbc1df61fad99880_JC.exe 2880 NEAS.e5fdc979ade79e64dbc1df61fad99880_JC.exe 2880 NEAS.e5fdc979ade79e64dbc1df61fad99880_JC.exe 2880 NEAS.e5fdc979ade79e64dbc1df61fad99880_JC.exe 2880 NEAS.e5fdc979ade79e64dbc1df61fad99880_JC.exe 2880 NEAS.e5fdc979ade79e64dbc1df61fad99880_JC.exe 2880 NEAS.e5fdc979ade79e64dbc1df61fad99880_JC.exe 2880 NEAS.e5fdc979ade79e64dbc1df61fad99880_JC.exe 2880 NEAS.e5fdc979ade79e64dbc1df61fad99880_JC.exe 2880 NEAS.e5fdc979ade79e64dbc1df61fad99880_JC.exe 2880 NEAS.e5fdc979ade79e64dbc1df61fad99880_JC.exe 2880 NEAS.e5fdc979ade79e64dbc1df61fad99880_JC.exe 2880 NEAS.e5fdc979ade79e64dbc1df61fad99880_JC.exe 2880 NEAS.e5fdc979ade79e64dbc1df61fad99880_JC.exe 2880 NEAS.e5fdc979ade79e64dbc1df61fad99880_JC.exe 2880 NEAS.e5fdc979ade79e64dbc1df61fad99880_JC.exe 2880 NEAS.e5fdc979ade79e64dbc1df61fad99880_JC.exe 2880 NEAS.e5fdc979ade79e64dbc1df61fad99880_JC.exe 2880 NEAS.e5fdc979ade79e64dbc1df61fad99880_JC.exe 2880 NEAS.e5fdc979ade79e64dbc1df61fad99880_JC.exe 2880 NEAS.e5fdc979ade79e64dbc1df61fad99880_JC.exe 2880 NEAS.e5fdc979ade79e64dbc1df61fad99880_JC.exe 2880 NEAS.e5fdc979ade79e64dbc1df61fad99880_JC.exe 2880 NEAS.e5fdc979ade79e64dbc1df61fad99880_JC.exe 2880 NEAS.e5fdc979ade79e64dbc1df61fad99880_JC.exe 2880 NEAS.e5fdc979ade79e64dbc1df61fad99880_JC.exe 2880 NEAS.e5fdc979ade79e64dbc1df61fad99880_JC.exe -
Suspicious use of SendNotifyMessage 31 IoCs
pid Process 2880 NEAS.e5fdc979ade79e64dbc1df61fad99880_JC.exe 2880 NEAS.e5fdc979ade79e64dbc1df61fad99880_JC.exe 2880 NEAS.e5fdc979ade79e64dbc1df61fad99880_JC.exe 2880 NEAS.e5fdc979ade79e64dbc1df61fad99880_JC.exe 2880 NEAS.e5fdc979ade79e64dbc1df61fad99880_JC.exe 2880 NEAS.e5fdc979ade79e64dbc1df61fad99880_JC.exe 2880 NEAS.e5fdc979ade79e64dbc1df61fad99880_JC.exe 2880 NEAS.e5fdc979ade79e64dbc1df61fad99880_JC.exe 2880 NEAS.e5fdc979ade79e64dbc1df61fad99880_JC.exe 2880 NEAS.e5fdc979ade79e64dbc1df61fad99880_JC.exe 2880 NEAS.e5fdc979ade79e64dbc1df61fad99880_JC.exe 2880 NEAS.e5fdc979ade79e64dbc1df61fad99880_JC.exe 2880 NEAS.e5fdc979ade79e64dbc1df61fad99880_JC.exe 2880 NEAS.e5fdc979ade79e64dbc1df61fad99880_JC.exe 2880 NEAS.e5fdc979ade79e64dbc1df61fad99880_JC.exe 2880 NEAS.e5fdc979ade79e64dbc1df61fad99880_JC.exe 2880 NEAS.e5fdc979ade79e64dbc1df61fad99880_JC.exe 2880 NEAS.e5fdc979ade79e64dbc1df61fad99880_JC.exe 2880 NEAS.e5fdc979ade79e64dbc1df61fad99880_JC.exe 2880 NEAS.e5fdc979ade79e64dbc1df61fad99880_JC.exe 2880 NEAS.e5fdc979ade79e64dbc1df61fad99880_JC.exe 2880 NEAS.e5fdc979ade79e64dbc1df61fad99880_JC.exe 2880 NEAS.e5fdc979ade79e64dbc1df61fad99880_JC.exe 2880 NEAS.e5fdc979ade79e64dbc1df61fad99880_JC.exe 2880 NEAS.e5fdc979ade79e64dbc1df61fad99880_JC.exe 2880 NEAS.e5fdc979ade79e64dbc1df61fad99880_JC.exe 2880 NEAS.e5fdc979ade79e64dbc1df61fad99880_JC.exe 2880 NEAS.e5fdc979ade79e64dbc1df61fad99880_JC.exe 2880 NEAS.e5fdc979ade79e64dbc1df61fad99880_JC.exe 2880 NEAS.e5fdc979ade79e64dbc1df61fad99880_JC.exe 2880 NEAS.e5fdc979ade79e64dbc1df61fad99880_JC.exe