Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
145s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
31/12/2023, 03:08
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
25cc710737dfc281b644a65e80b0286a.exe
Resource
win7-20231215-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
25cc710737dfc281b644a65e80b0286a.exe
Resource
win10v2004-20231215-en
3 signatures
150 seconds
General
-
Target
25cc710737dfc281b644a65e80b0286a.exe
-
Size
224KB
-
MD5
25cc710737dfc281b644a65e80b0286a
-
SHA1
46eeba6224d09bd8dc5e860cf3b505e752600465
-
SHA256
4cc0e0c12f75c4ec113b834b221f7aca961993abc7f314c1fa174a7d19c0edf3
-
SHA512
8fe3dc65475d220a9211187f718937e12d45ae6109263121fb859f84111b1ba035d0cfaca0e78ed529ea29a6b50752c26a40322979f5fadcaa18280bf2bf3d78
-
SSDEEP
1536:hKtRWlEZD46JBAW9jcHS9Z7yDnLJ3+U1iDexwdZGWlEsKt:yWlb6JSQcHS9Z7yDnLJ3+U1BwaWl
Score
1/10
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4940 25cc710737dfc281b644a65e80b0286a.exe -
Suspicious use of SendNotifyMessage 1 IoCs
pid Process 4940 25cc710737dfc281b644a65e80b0286a.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 4940 25cc710737dfc281b644a65e80b0286a.exe 4940 25cc710737dfc281b644a65e80b0286a.exe