Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
142s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231025-en -
resource tags
arch:x64arch:x86image:win10v2004-20231025-enlocale:en-usos:windows10-2004-x64system -
submitted
13/11/2023, 10:54
Static task
static1
Behavioral task
behavioral1
Sample
25e5d7adb9786e5703dd151ea984cc24f89257d96a1f90839524c67390edc0ee.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
25e5d7adb9786e5703dd151ea984cc24f89257d96a1f90839524c67390edc0ee.exe
Resource
win10v2004-20231025-en
General
-
Target
25e5d7adb9786e5703dd151ea984cc24f89257d96a1f90839524c67390edc0ee.exe
-
Size
14.7MB
-
MD5
2a10e10c15874d52f9b2e055a949ac8e
-
SHA1
87b4551599a96d7f24601214a4406ece83ccec18
-
SHA256
25e5d7adb9786e5703dd151ea984cc24f89257d96a1f90839524c67390edc0ee
-
SHA512
440cf86003803fc861d29c3cc46bfa093980cd2963b236f35840297e8681f077f752cb0a8d3b759d6f248e4605c7efbd98ed26c0b86c14e444f801e7bbddfc4b
-
SSDEEP
393216:8xHShLj5HDmMSI804Cpq/nKPANyxSXlvfiF6:8xyNjNSr04t/nKA+CB6
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2964 25e5d7adb9786e5703dd151ea984cc24f89257d96a1f90839524c67390edc0ee.exe 2964 25e5d7adb9786e5703dd151ea984cc24f89257d96a1f90839524c67390edc0ee.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2964 25e5d7adb9786e5703dd151ea984cc24f89257d96a1f90839524c67390edc0ee.exe 2964 25e5d7adb9786e5703dd151ea984cc24f89257d96a1f90839524c67390edc0ee.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\25e5d7adb9786e5703dd151ea984cc24f89257d96a1f90839524c67390edc0ee.exe"C:\Users\Admin\AppData\Local\Temp\25e5d7adb9786e5703dd151ea984cc24f89257d96a1f90839524c67390edc0ee.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:2964