Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
1s -
max time network
124s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
09/01/2024, 08:21
Behavioral task
behavioral1
Sample
4dd220b5f124d5b03f85a1d057c25b46.exe
Resource
win7-20231215-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
4dd220b5f124d5b03f85a1d057c25b46.exe
Resource
win10v2004-20231215-en
2 signatures
150 seconds
General
-
Target
4dd220b5f124d5b03f85a1d057c25b46.exe
-
Size
2.0MB
-
MD5
4dd220b5f124d5b03f85a1d057c25b46
-
SHA1
f3b1f766cdd64d392fdce29439e86409ec330d7e
-
SHA256
16920507cb21711a80472e4d432ff43cbe26b9b30ec413efab553cdcb8f200f6
-
SHA512
f98284e022c5ab815c29117e2f276407e8c394c1e82cc108cd5965582d094032e5610889d94266973b7d800cc14e112e350f5aa3ea663706c1fca487f56e64a2
-
SSDEEP
49152:ETKUz1WPymSGXEfrOW4LV/yJr/I25EWsGYPfxvSXEaUeK+6v:GKSsPyfnfrj4LAw25EWqpaXw
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/1292-0-0x0000000000400000-0x00000000009C0000-memory.dmp upx behavioral2/memory/1292-2-0x0000000000400000-0x00000000009C0000-memory.dmp upx -
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 1292 4dd220b5f124d5b03f85a1d057c25b46.exe 1292 4dd220b5f124d5b03f85a1d057c25b46.exe