Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
21s -
max time network
21s -
platform
windows10-2004_x64 -
resource
win10v2004-20231130-en -
resource tags
arch:x64arch:x86image:win10v2004-20231130-enlocale:en-usos:windows10-2004-x64system -
submitted
04/12/2023, 17:53 UTC
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
AutoClickers.exe
Resource
win7-20231020-en
windows7-x64
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
AutoClickers.exe
Resource
win10v2004-20231130-en
windows10-2004-x64
4 signatures
150 seconds
General
-
Target
AutoClickers.exe
-
Size
939KB
-
MD5
27d5a6c9274255cf89b38f28480edcf0
-
SHA1
88036bf7a8956dd7f7e53ffabb6d29a7508060dc
-
SHA256
cbe005a1b13a85b5f6bed4fa213e1bb837b222521f8e83ac3879d5bf791d5288
-
SHA512
46997fde9001405998beca19ee0be329743dc5aee7cda525add25309c795dfee0e5859ef4c4b1bf9e1cdce21f2ac5e90f1f336ee1f0b9e5372581c7f254ec075
-
SSDEEP
12288:UaWzgMg7v3qnCijErQohh0F4CCJ8lnyEQzHlV0RlPWhq2zXfu4uS0:LaHMv6C/rjinyEQzr0XP0q2zXfu4U
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1852 AutoClickers.exe -
Suspicious use of FindShellTrayWindow 35 IoCs
pid Process 1852 AutoClickers.exe 1852 AutoClickers.exe 1852 AutoClickers.exe 1852 AutoClickers.exe 1852 AutoClickers.exe 1852 AutoClickers.exe 1852 AutoClickers.exe 1852 AutoClickers.exe 1852 AutoClickers.exe 1852 AutoClickers.exe 1852 AutoClickers.exe 1852 AutoClickers.exe 1852 AutoClickers.exe 1852 AutoClickers.exe 1852 AutoClickers.exe 1852 AutoClickers.exe 1852 AutoClickers.exe 1852 AutoClickers.exe 1852 AutoClickers.exe 1852 AutoClickers.exe 1852 AutoClickers.exe 1852 AutoClickers.exe 1852 AutoClickers.exe 1852 AutoClickers.exe 1852 AutoClickers.exe 1852 AutoClickers.exe 1852 AutoClickers.exe 1852 AutoClickers.exe 1852 AutoClickers.exe 1852 AutoClickers.exe 1852 AutoClickers.exe 1852 AutoClickers.exe 1852 AutoClickers.exe 1852 AutoClickers.exe 1852 AutoClickers.exe -
Suspicious use of SendNotifyMessage 35 IoCs
pid Process 1852 AutoClickers.exe 1852 AutoClickers.exe 1852 AutoClickers.exe 1852 AutoClickers.exe 1852 AutoClickers.exe 1852 AutoClickers.exe 1852 AutoClickers.exe 1852 AutoClickers.exe 1852 AutoClickers.exe 1852 AutoClickers.exe 1852 AutoClickers.exe 1852 AutoClickers.exe 1852 AutoClickers.exe 1852 AutoClickers.exe 1852 AutoClickers.exe 1852 AutoClickers.exe 1852 AutoClickers.exe 1852 AutoClickers.exe 1852 AutoClickers.exe 1852 AutoClickers.exe 1852 AutoClickers.exe 1852 AutoClickers.exe 1852 AutoClickers.exe 1852 AutoClickers.exe 1852 AutoClickers.exe 1852 AutoClickers.exe 1852 AutoClickers.exe 1852 AutoClickers.exe 1852 AutoClickers.exe 1852 AutoClickers.exe 1852 AutoClickers.exe 1852 AutoClickers.exe 1852 AutoClickers.exe 1852 AutoClickers.exe 1852 AutoClickers.exe