Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
6s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
25/12/2023, 09:57
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
159188d98ebc65e46db6640d9020de43.exe
Resource
win7-20231215-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
159188d98ebc65e46db6640d9020de43.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
159188d98ebc65e46db6640d9020de43.exe
-
Size
28KB
-
MD5
159188d98ebc65e46db6640d9020de43
-
SHA1
9383b774057523149b0b7f38cec77af442fc0b34
-
SHA256
3a6fe5994e537ccc57d1e99735bb88539d78988af1021445697d0f467baf6b39
-
SHA512
caae7d11e558e1af79d1f008ed4c57e044d622731fd009289df625bc77d26aae8b8e7c411cd5d0869e0385b8f216b741aa1c263e3417e6d38ea72936a615b8ff
-
SSDEEP
384:xzDg2hYdBP2pzt9QldiZwBNtwqE/HaIZ3v3LZJ5KFdXuJGu:Js9BP2o4wB738Had
Score
1/10
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 220 159188d98ebc65e46db6640d9020de43.exe 220 159188d98ebc65e46db6640d9020de43.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\159188d98ebc65e46db6640d9020de43.exe"C:\Users\Admin\AppData\Local\Temp\159188d98ebc65e46db6640d9020de43.exe"1⤵
- Suspicious use of SetWindowsHookEx
PID:220
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k ClipboardSvcGroup -p -s cbdhsvc1⤵PID:2100