Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
26/12/2023, 09:18
Behavioral task
behavioral1
Sample
631ec85444342a1c81f730f414818e90.exe
Resource
win7-20231129-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
631ec85444342a1c81f730f414818e90.exe
Resource
win10v2004-20231215-en
2 signatures
150 seconds
General
-
Target
631ec85444342a1c81f730f414818e90.exe
-
Size
947KB
-
MD5
631ec85444342a1c81f730f414818e90
-
SHA1
9a20faa66abed6e020f445f4f0abc32edcca4a80
-
SHA256
e5b5229d41364e2ebfb4ed2a225eadd91cfb27506132471442b45de319cc2882
-
SHA512
a2405e421620abb17999255dec26a968a30eedd410a553dc4c42cdffddbd10c62a63088ba810d628c8ffdd7f0e7b241cbb005a11ba5c11d5b64993278c81d728
-
SSDEEP
24576:bq6LAFqtTJk7P6M7lmc9v4hCXOkEzxji4YUBhEZ3sD5dT3:bqbP6elLGCXOzAtUBCW53
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/4076-0-0x0000000000400000-0x0000000000426000-memory.dmp upx behavioral2/memory/4076-1-0x0000000000400000-0x0000000000426000-memory.dmp upx -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 4076 631ec85444342a1c81f730f414818e90.exe 4076 631ec85444342a1c81f730f414818e90.exe