Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
141s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
26/12/2023, 15:24
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
78ba729c319500d4ab08b31bf056dba5.exe
Resource
win7-20231215-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
78ba729c319500d4ab08b31bf056dba5.exe
Resource
win10v2004-20231215-en
3 signatures
150 seconds
General
-
Target
78ba729c319500d4ab08b31bf056dba5.exe
-
Size
2.2MB
-
MD5
78ba729c319500d4ab08b31bf056dba5
-
SHA1
670f23244940054f64556ba78102c13af08c3161
-
SHA256
dd053a01e851c748806336f6b9a7a5a01cc70a5df6af0f11ab581b5234e617fd
-
SHA512
deb9e5f320828190919af0c126bdc8b80e3862c889701877c473a78b38eaa6d4dd587f9c4280f830e6f103abdba540793b11e5f6fef75a905b8c25cb6c28a6c2
-
SSDEEP
49152:5JUwM7O85GsIPANnMHrS9q2+OEn7tiNNusm4J67VGImpiminyYN:w3dtIiAri+OcKA4aVjt5N
Score
1/10
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 3916 78ba729c319500d4ab08b31bf056dba5.exe -
Suspicious use of SendNotifyMessage 1 IoCs
pid Process 3916 78ba729c319500d4ab08b31bf056dba5.exe -
Suspicious use of SetWindowsHookEx 5 IoCs
pid Process 3916 78ba729c319500d4ab08b31bf056dba5.exe 3916 78ba729c319500d4ab08b31bf056dba5.exe 3916 78ba729c319500d4ab08b31bf056dba5.exe 3916 78ba729c319500d4ab08b31bf056dba5.exe 3916 78ba729c319500d4ab08b31bf056dba5.exe