Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
0s -
max time network
59s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
05/01/2024, 08:43
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Vacuum (2) (2).exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Vacuum (2) (2).exe
Resource
win10v2004-20231222-en
0 signatures
150 seconds
General
-
Target
Vacuum (2) (2).exe
-
Size
6.0MB
-
MD5
dc112d6f1dffbd1f1049413a493c41b3
-
SHA1
3022f9f85d85735b000af193ae766b2576eee537
-
SHA256
43d0cd2a2ebaf029a98545e0cd3b0013ae7564fe9e0e19b378e67c8b0737d29e
-
SHA512
e47145277c4731a2ba513b699b2e1a380b7a3733658c2d7719d53a287f4a60f13a66dc8d14688282343dfbe7501d4d81ff71fdceadf012135de0ad5948fc3472
-
SSDEEP
98304:Yg09C7lJw/kngbjkEksToRep9fTqGAakUNP3e7NpGmtCgGig/XG+AhAXNhFg9e:MY7okn0rxqhak83MPfRQG+3Fgs
Score
1/10
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\Vacuum (2) (2).exe"C:\Users\Admin\AppData\Local\Temp\Vacuum (2) (2).exe"1⤵PID:4936
-
C:\Windows\SYSTEM32\cmd.exe"cmd.exe" /C wmic baseboard get serialnumber2⤵PID:3772
-
-
C:\Windows\SYSTEM32\cmd.exe"cmd.exe" /C wmic logicaldisk get volumeserialnumber2⤵PID:2360
-
-
C:\Windows\SYSTEM32\cmd.exe"cmd.exe" /C wmic CPU get Architecture2⤵PID:1588
-
-
C:\Windows\SYSTEM32\cmd.exe"cmd.exe" /C wmic path Win32_videocontroller get PNPDeviceID2⤵PID:5044
-
-
C:\Windows\SYSTEM32\cmd.exe"cmd.exe" /C wmic baseboard get serialnumber2⤵PID:3104
-
-
C:\Windows\SYSTEM32\cmd.exe"cmd.exe" /C wmic logicaldisk get volumeserialnumber2⤵PID:2808
-
-
C:\Windows\SYSTEM32\cmd.exe"cmd.exe" /C wmic CPU get Architecture2⤵PID:2972
-
-
C:\Windows\SYSTEM32\cmd.exe"cmd.exe" /C wmic path Win32_videocontroller get PNPDeviceID2⤵PID:2732
-
-
C:\Windows\System32\Wbem\WMIC.exewmic path Win32_videocontroller get PNPDeviceID1⤵PID:3868
-
C:\Windows\System32\Wbem\WMIC.exewmic CPU get Architecture1⤵PID:1468
-
C:\Windows\System32\Wbem\WMIC.exewmic logicaldisk get volumeserialnumber1⤵PID:4080
-
C:\Windows\System32\Wbem\WMIC.exewmic baseboard get serialnumber1⤵PID:2132
-
C:\Windows\System32\Wbem\WMIC.exewmic path Win32_videocontroller get PNPDeviceID1⤵PID:2416
-
C:\Windows\System32\Wbem\WMIC.exewmic CPU get Architecture1⤵PID:3460
-
C:\Windows\System32\Wbem\WMIC.exewmic logicaldisk get volumeserialnumber1⤵PID:3208
-
C:\Windows\System32\Wbem\WMIC.exewmic baseboard get serialnumber1⤵PID:5040