Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
2s -
max time network
43s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
29/12/2023, 23:37
Static task
static1
Behavioral task
behavioral1
Sample
fxt/飞信通客户端/888netsms.htm
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
fxt/飞信通客户端/888netsms.htm
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
fxt/飞信通客户端/GetPL.exe
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
fxt/飞信通客户端/GetPL.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral5
Sample
fxt/飞信通客户端/飞信通客户端.exe
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
fxt/飞信通客户端/飞信通客户端.exe
Resource
win10v2004-20231215-en
General
-
Target
fxt/飞信通客户端/GetPL.exe
-
Size
208KB
-
MD5
03591f448fd33cb3c29484cf27d994c8
-
SHA1
4d7707e10c996b93783ecba8465984534aecbca9
-
SHA256
58ab490a8dbedee28fe69bd4d731eed8685209bca50ca682fa815accaff61a45
-
SHA512
9958b9b27b8811630d5c58d8ba47196422a0ce264646e4ecac2fcff367f8dc1e3bc35e655c4c6f6ef98ff72273d43aa9ce808e67ac23ee4bef3c2afdbdcf6d37
-
SSDEEP
3072:otqsKsRtw8008bxoBeyLmwI+rLiACvE/WwWoYMfbCPoJoGxNHc:Mqgw800KoBbLHI+NCdwJY8nxN
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 848 GetPL.exe 848 GetPL.exe