Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
208s -
max time network
227s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
31/12/2023, 20:43
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3b01321c45b84eef46de0ebf07eb7fa4.exe
Resource
win7-20231215-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
3b01321c45b84eef46de0ebf07eb7fa4.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
4 signatures
150 seconds
General
-
Target
3b01321c45b84eef46de0ebf07eb7fa4.exe
-
Size
5.2MB
-
MD5
3b01321c45b84eef46de0ebf07eb7fa4
-
SHA1
308f06762a8e0f7c56c13391793d57236221ef58
-
SHA256
b195fad32fedec4e776773d009d540642ec7b35b6a4bab11786c47cb7a8207f2
-
SHA512
4f289886fc3211074349f675c2c1d09a21c2153b78f2c44f0d7709da9618d49226a1221cf299fbec2d3efbbdbc8c71a8e9b1c636e71ce15f2cb286ea81777d62
-
SSDEEP
98304:AN02OXTL7BVa2NT5nf1vdOQZQBwKwYkqWxlddEym77ygcjS72e6g1Vm9H/sL/MHc:rv7BbPf1vAQWWrK+WtT+
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 64 IoCs
pid Process 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe -
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe 3136 3b01321c45b84eef46de0ebf07eb7fa4.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\3b01321c45b84eef46de0ebf07eb7fa4.exe"C:\Users\Admin\AppData\Local\Temp\3b01321c45b84eef46de0ebf07eb7fa4.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
PID:3136