Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
2s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
03/01/2024, 20:38
Static task
static1
Behavioral task
behavioral1
Sample
3f05a055ba80c63d9eb35a67772a6573.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3f05a055ba80c63d9eb35a67772a6573.exe
Resource
win10v2004-20231215-en
General
-
Target
3f05a055ba80c63d9eb35a67772a6573.exe
-
Size
1.1MB
-
MD5
3f05a055ba80c63d9eb35a67772a6573
-
SHA1
0d3e4bc1df0cec625ae2ee7cfbec107add981a44
-
SHA256
48b283754e3ed79ace6765f070cca9194d0c620de1b30f8d213d1fd5cbbee460
-
SHA512
29fdc1479911a0b630ff7e784296fa11267145ce09b50d71d30cc36a8215a3dcd04c0ced8af281353b1e2b4a30cfcad7482ce3c6b6fc0b0cc3a157d711af7f7e
-
SSDEEP
12288:JKaiFc4ybOHHTurfwZjvvJ8Wo/jnN/TjNrlyTkXSkkIasq6Jxj20LST19Kpu4mMk:M9XurfbWOFfN4rRIa2j25T1spDmMk
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 4088 3f05a055ba80c63d9eb35a67772a6573.exe 4088 3f05a055ba80c63d9eb35a67772a6573.exe