Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
163s -
max time network
171s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
10/01/2024, 10:32
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
5052ba0586b4e59ae0c5beb849214300.exe
Resource
win7-20231129-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
5052ba0586b4e59ae0c5beb849214300.exe
Resource
win10v2004-20231215-en
2 signatures
150 seconds
General
-
Target
5052ba0586b4e59ae0c5beb849214300.exe
-
Size
7.6MB
-
MD5
5052ba0586b4e59ae0c5beb849214300
-
SHA1
4e7e738ecc86d553a30bef708d20799faab7fb57
-
SHA256
3e279da1c1e422212692d3662e2cd5a0f89e2a5e44b6139c6de1c1de63dff671
-
SHA512
d5995b8d791a5e38214012af317ec3ccbe1ae188c9f584abf75bcd91b0a275f8c0c0bf3d6ce4a7565533c647c83c00eca24aaa34545a2d710dd723c7a6e541fd
-
SSDEEP
196608:h24eqtAgWddNUox1IuTjm66tlPxsRUyAtgrUwtj:oAxWtfIuTjm6YKUyYUD
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 3172 5052ba0586b4e59ae0c5beb849214300.exe 3172 5052ba0586b4e59ae0c5beb849214300.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3172 5052ba0586b4e59ae0c5beb849214300.exe