Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
158s -
max time network
169s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
12/01/2024, 01:49
Behavioral task
behavioral1
Sample
51abc82b143af34c96fcd7c710467f3c.exe
Resource
win7-20231215-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
51abc82b143af34c96fcd7c710467f3c.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
51abc82b143af34c96fcd7c710467f3c.exe
-
Size
7KB
-
MD5
51abc82b143af34c96fcd7c710467f3c
-
SHA1
f9c06c302d287471919724fff14552d9c830d09a
-
SHA256
927e2f1347ce08961d8a5c512cbeec20b117ef105d609453f93f20ac5bdfe602
-
SHA512
dc95f5904bcdd84ccb2abce65c76ea9fcb4da7bb1c5f32fff0d3a996b662ce9a184f6ae343036e701a853b35fcea9ee04cf6f017e5366764cde140bb2c267f8f
-
SSDEEP
96:MgPTjb20bNAUQMYhzbuJ6js4GchFrOCNWXDD7ShjjJQ920bJ0BG/VP0JpFYo:HLjb1bNLhPMseF7aD7OsPt0AdmpB
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/2336-0-0x0000000000400000-0x0000000000408000-memory.dmp upx behavioral2/memory/2336-1-0x0000000000400000-0x0000000000408000-memory.dmp upx -
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2336 51abc82b143af34c96fcd7c710467f3c.exe 2336 51abc82b143af34c96fcd7c710467f3c.exe 2336 51abc82b143af34c96fcd7c710467f3c.exe 2336 51abc82b143af34c96fcd7c710467f3c.exe 2336 51abc82b143af34c96fcd7c710467f3c.exe 2336 51abc82b143af34c96fcd7c710467f3c.exe 2336 51abc82b143af34c96fcd7c710467f3c.exe 2336 51abc82b143af34c96fcd7c710467f3c.exe 2336 51abc82b143af34c96fcd7c710467f3c.exe 2336 51abc82b143af34c96fcd7c710467f3c.exe 2336 51abc82b143af34c96fcd7c710467f3c.exe 2336 51abc82b143af34c96fcd7c710467f3c.exe 2336 51abc82b143af34c96fcd7c710467f3c.exe 2336 51abc82b143af34c96fcd7c710467f3c.exe 2336 51abc82b143af34c96fcd7c710467f3c.exe 2336 51abc82b143af34c96fcd7c710467f3c.exe 2336 51abc82b143af34c96fcd7c710467f3c.exe 2336 51abc82b143af34c96fcd7c710467f3c.exe 2336 51abc82b143af34c96fcd7c710467f3c.exe 2336 51abc82b143af34c96fcd7c710467f3c.exe 2336 51abc82b143af34c96fcd7c710467f3c.exe 2336 51abc82b143af34c96fcd7c710467f3c.exe 2336 51abc82b143af34c96fcd7c710467f3c.exe 2336 51abc82b143af34c96fcd7c710467f3c.exe 2336 51abc82b143af34c96fcd7c710467f3c.exe 2336 51abc82b143af34c96fcd7c710467f3c.exe 2336 51abc82b143af34c96fcd7c710467f3c.exe 2336 51abc82b143af34c96fcd7c710467f3c.exe 2336 51abc82b143af34c96fcd7c710467f3c.exe 2336 51abc82b143af34c96fcd7c710467f3c.exe 2336 51abc82b143af34c96fcd7c710467f3c.exe 2336 51abc82b143af34c96fcd7c710467f3c.exe 2336 51abc82b143af34c96fcd7c710467f3c.exe 2336 51abc82b143af34c96fcd7c710467f3c.exe 2336 51abc82b143af34c96fcd7c710467f3c.exe 2336 51abc82b143af34c96fcd7c710467f3c.exe 2336 51abc82b143af34c96fcd7c710467f3c.exe 2336 51abc82b143af34c96fcd7c710467f3c.exe 2336 51abc82b143af34c96fcd7c710467f3c.exe 2336 51abc82b143af34c96fcd7c710467f3c.exe 2336 51abc82b143af34c96fcd7c710467f3c.exe 2336 51abc82b143af34c96fcd7c710467f3c.exe 2336 51abc82b143af34c96fcd7c710467f3c.exe 2336 51abc82b143af34c96fcd7c710467f3c.exe 2336 51abc82b143af34c96fcd7c710467f3c.exe 2336 51abc82b143af34c96fcd7c710467f3c.exe 2336 51abc82b143af34c96fcd7c710467f3c.exe 2336 51abc82b143af34c96fcd7c710467f3c.exe 2336 51abc82b143af34c96fcd7c710467f3c.exe 2336 51abc82b143af34c96fcd7c710467f3c.exe 2336 51abc82b143af34c96fcd7c710467f3c.exe 2336 51abc82b143af34c96fcd7c710467f3c.exe 2336 51abc82b143af34c96fcd7c710467f3c.exe 2336 51abc82b143af34c96fcd7c710467f3c.exe 2336 51abc82b143af34c96fcd7c710467f3c.exe 2336 51abc82b143af34c96fcd7c710467f3c.exe 2336 51abc82b143af34c96fcd7c710467f3c.exe 2336 51abc82b143af34c96fcd7c710467f3c.exe 2336 51abc82b143af34c96fcd7c710467f3c.exe 2336 51abc82b143af34c96fcd7c710467f3c.exe 2336 51abc82b143af34c96fcd7c710467f3c.exe 2336 51abc82b143af34c96fcd7c710467f3c.exe 2336 51abc82b143af34c96fcd7c710467f3c.exe 2336 51abc82b143af34c96fcd7c710467f3c.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2336 51abc82b143af34c96fcd7c710467f3c.exe