Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
157s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
30/12/2023, 21:02
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
1c65f0990c8030495c5369c7a697c762.exe
Resource
win7-20231129-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
1c65f0990c8030495c5369c7a697c762.exe
Resource
win10v2004-20231215-en
2 signatures
150 seconds
General
-
Target
1c65f0990c8030495c5369c7a697c762.exe
-
Size
4.9MB
-
MD5
1c65f0990c8030495c5369c7a697c762
-
SHA1
bdf2094aba42e2b5e9a7f695fbb7b0ee019a0e71
-
SHA256
c4d2c77e3219fbcb7d1810f4b9b5abb31d7e1610cb92a66a6b08da2557488cd3
-
SHA512
5316fea899d96494489d009b5389ae91d0802022847da7b428fa4b76db9e64aed1bc65eebdc76a43d99c3d3cdaf7119a2f901fd11bf4ec83817b5ef3b10ab21d
-
SSDEEP
98304:30Atc4dL3Plb8bJb6QICYjMS7ZeV2pGf98yw4GHxtR6TX1i2adaC:3tvflk7I7jVQVE08xVsX1s5
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
pid Process 740 1c65f0990c8030495c5369c7a697c762.exe -
Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 740 1c65f0990c8030495c5369c7a697c762.exe 740 1c65f0990c8030495c5369c7a697c762.exe 740 1c65f0990c8030495c5369c7a697c762.exe 740 1c65f0990c8030495c5369c7a697c762.exe