Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
145s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
30/12/2023, 11:22
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
1705809ef12c68bcb76de795f5be70e9.exe
Resource
win7-20231129-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
1705809ef12c68bcb76de795f5be70e9.exe
Resource
win10v2004-20231222-en
2 signatures
150 seconds
General
-
Target
1705809ef12c68bcb76de795f5be70e9.exe
-
Size
653KB
-
MD5
1705809ef12c68bcb76de795f5be70e9
-
SHA1
ca2364016dc3e888acc1b60b4c232c1cd222f7d1
-
SHA256
51dd18775d6de9a0ad24a3087b6ae5d98d5f98808a7803e78664b6de62d1017b
-
SHA512
7847034bca068ad9582cc043e4b6020c664fe39dc21ab013c1ba1020535488b94b91ade93d6de4dd0c123560aa94c7eea6f9146c49a398adf55573d2dcd69258
-
SSDEEP
12288:gE0f86mBu9txwMhhZaASAyppOxyGk2EmiXapm1fqJUVmRugr:gE0EEbwMhhZarp0xRkHXao+KmRua
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 58 IoCs
pid Process 1592 1705809ef12c68bcb76de795f5be70e9.exe 1592 1705809ef12c68bcb76de795f5be70e9.exe 1592 1705809ef12c68bcb76de795f5be70e9.exe 1592 1705809ef12c68bcb76de795f5be70e9.exe 1592 1705809ef12c68bcb76de795f5be70e9.exe 1592 1705809ef12c68bcb76de795f5be70e9.exe 1592 1705809ef12c68bcb76de795f5be70e9.exe 1592 1705809ef12c68bcb76de795f5be70e9.exe 1592 1705809ef12c68bcb76de795f5be70e9.exe 1592 1705809ef12c68bcb76de795f5be70e9.exe 1592 1705809ef12c68bcb76de795f5be70e9.exe 1592 1705809ef12c68bcb76de795f5be70e9.exe 1592 1705809ef12c68bcb76de795f5be70e9.exe 1592 1705809ef12c68bcb76de795f5be70e9.exe 1592 1705809ef12c68bcb76de795f5be70e9.exe 1592 1705809ef12c68bcb76de795f5be70e9.exe 1592 1705809ef12c68bcb76de795f5be70e9.exe 1592 1705809ef12c68bcb76de795f5be70e9.exe 1592 1705809ef12c68bcb76de795f5be70e9.exe 1592 1705809ef12c68bcb76de795f5be70e9.exe 1592 1705809ef12c68bcb76de795f5be70e9.exe 1592 1705809ef12c68bcb76de795f5be70e9.exe 1592 1705809ef12c68bcb76de795f5be70e9.exe 1592 1705809ef12c68bcb76de795f5be70e9.exe 1592 1705809ef12c68bcb76de795f5be70e9.exe 1592 1705809ef12c68bcb76de795f5be70e9.exe 1592 1705809ef12c68bcb76de795f5be70e9.exe 1592 1705809ef12c68bcb76de795f5be70e9.exe 1592 1705809ef12c68bcb76de795f5be70e9.exe 1592 1705809ef12c68bcb76de795f5be70e9.exe 1592 1705809ef12c68bcb76de795f5be70e9.exe 1592 1705809ef12c68bcb76de795f5be70e9.exe 1592 1705809ef12c68bcb76de795f5be70e9.exe 1592 1705809ef12c68bcb76de795f5be70e9.exe 1592 1705809ef12c68bcb76de795f5be70e9.exe 1592 1705809ef12c68bcb76de795f5be70e9.exe 1592 1705809ef12c68bcb76de795f5be70e9.exe 1592 1705809ef12c68bcb76de795f5be70e9.exe 1592 1705809ef12c68bcb76de795f5be70e9.exe 1592 1705809ef12c68bcb76de795f5be70e9.exe 1592 1705809ef12c68bcb76de795f5be70e9.exe 1592 1705809ef12c68bcb76de795f5be70e9.exe 1592 1705809ef12c68bcb76de795f5be70e9.exe 1592 1705809ef12c68bcb76de795f5be70e9.exe 1592 1705809ef12c68bcb76de795f5be70e9.exe 1592 1705809ef12c68bcb76de795f5be70e9.exe 1592 1705809ef12c68bcb76de795f5be70e9.exe 1592 1705809ef12c68bcb76de795f5be70e9.exe 1592 1705809ef12c68bcb76de795f5be70e9.exe 1592 1705809ef12c68bcb76de795f5be70e9.exe 1592 1705809ef12c68bcb76de795f5be70e9.exe 1592 1705809ef12c68bcb76de795f5be70e9.exe 1592 1705809ef12c68bcb76de795f5be70e9.exe 1592 1705809ef12c68bcb76de795f5be70e9.exe 1592 1705809ef12c68bcb76de795f5be70e9.exe 1592 1705809ef12c68bcb76de795f5be70e9.exe 1592 1705809ef12c68bcb76de795f5be70e9.exe 1592 1705809ef12c68bcb76de795f5be70e9.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1592 1705809ef12c68bcb76de795f5be70e9.exe