Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
176s -
max time network
207s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
24/12/2023, 15:34
Static task
static1
Behavioral task
behavioral1
Sample
03db8c5e65770fdb40be1c795b8a54f8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
03db8c5e65770fdb40be1c795b8a54f8.exe
Resource
win10v2004-20231215-en
General
-
Target
03db8c5e65770fdb40be1c795b8a54f8.exe
-
Size
2.0MB
-
MD5
03db8c5e65770fdb40be1c795b8a54f8
-
SHA1
dda076de9253bb4097329290c99f67961357e82c
-
SHA256
68a47ccaba31522ec766feac5a117f9ee4197a16c5681fa55639c8717b1bdcb5
-
SHA512
ae7b18e6c282aef32dc24aa4dcf009e6289de032b1845f019612405906c10f3d7fefdc5286b975826c60e77ee5289ddfeade9fa374b2743086d99ab0c69e9c35
-
SSDEEP
49152:y1ORNReNPQ8vywYisX67FqTSDhBkYyK9L:N3sI8vyssX+wWDQnK9L
Malware Config
Signatures
-
Checks BIOS information in registry 2 TTPs 1 IoCs
BIOS information is often read in order to detect sandboxing environments.
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosVersion 03db8c5e65770fdb40be1c795b8a54f8.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1936 03db8c5e65770fdb40be1c795b8a54f8.exe 1936 03db8c5e65770fdb40be1c795b8a54f8.exe 1936 03db8c5e65770fdb40be1c795b8a54f8.exe 1936 03db8c5e65770fdb40be1c795b8a54f8.exe