Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
169s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
04/01/2024, 06:21
Static task
static1
Behavioral task
behavioral1
Sample
401ebac2d5950ad4e57395cf0bf484f2.exe
Resource
win7-20231215-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
401ebac2d5950ad4e57395cf0bf484f2.exe
Resource
win10v2004-20231215-en
3 signatures
150 seconds
General
-
Target
401ebac2d5950ad4e57395cf0bf484f2.exe
-
Size
2.4MB
-
MD5
401ebac2d5950ad4e57395cf0bf484f2
-
SHA1
3900c7da4f40f01b63e41073afa75dfb0877c0c1
-
SHA256
7cdd0614a61509dfdc3fdeffb21c93aa49e00416ee5fe9071f90140b5700edb0
-
SHA512
69c441aea4037365630b8f401b9861d8459fd690f2092b88b600ab424cfd28dcda9d10da60afd81e39a61f1a760c1c8db43c2ed8c48929175c2a7fe153a8643e
-
SSDEEP
49152:7IrGLt8as01pF6qxSN7xrlCxL4UF7j06ietkQtdOv9Wh8Oi9/taX8ZE:cSsg6qC7x5CxLFFjBietkQtdOv9Wahsj
Score
1/10
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4364 401ebac2d5950ad4e57395cf0bf484f2.exe -
Suspicious use of SendNotifyMessage 1 IoCs
pid Process 4364 401ebac2d5950ad4e57395cf0bf484f2.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 4364 401ebac2d5950ad4e57395cf0bf484f2.exe 4364 401ebac2d5950ad4e57395cf0bf484f2.exe