Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
13/01/2024, 22:45
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
599ae1495c7ee77075fab1bd8687c2e7.exe
Resource
win7-20231215-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
599ae1495c7ee77075fab1bd8687c2e7.exe
Resource
win10v2004-20231222-en
3 signatures
150 seconds
General
-
Target
599ae1495c7ee77075fab1bd8687c2e7.exe
-
Size
91KB
-
MD5
599ae1495c7ee77075fab1bd8687c2e7
-
SHA1
355bc24dc02207b5e4b3b458f65af1ffb42044b3
-
SHA256
e32542b7555a446fbe65a9adc10dfc4d95053149e126dfa43a864da11f53f7e6
-
SHA512
a7659c78ff542af49a1c4948ec270d61bbfb655393be5273ac0db5c8253971702c4aa7a140d6b874fbce1c32ac3108bf760d6bb8322b7b174d780d021f1fc190
-
SSDEEP
1536:dmVg1kEWCGF8Nc8Yu2SssplGjP8D3IGQ/4s7YCf8ntLRZ1uFu9aRAeGrLXCPRjAD:k21fPYJIGP8D3I94PCfs5RHcusCws+1m
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 3944 599ae1495c7ee77075fab1bd8687c2e7.exe 3944 599ae1495c7ee77075fab1bd8687c2e7.exe 3944 599ae1495c7ee77075fab1bd8687c2e7.exe 3944 599ae1495c7ee77075fab1bd8687c2e7.exe 3944 599ae1495c7ee77075fab1bd8687c2e7.exe 3944 599ae1495c7ee77075fab1bd8687c2e7.exe 3944 599ae1495c7ee77075fab1bd8687c2e7.exe 3944 599ae1495c7ee77075fab1bd8687c2e7.exe 3944 599ae1495c7ee77075fab1bd8687c2e7.exe 3944 599ae1495c7ee77075fab1bd8687c2e7.exe 3944 599ae1495c7ee77075fab1bd8687c2e7.exe 3944 599ae1495c7ee77075fab1bd8687c2e7.exe 3944 599ae1495c7ee77075fab1bd8687c2e7.exe 3944 599ae1495c7ee77075fab1bd8687c2e7.exe 3944 599ae1495c7ee77075fab1bd8687c2e7.exe 3944 599ae1495c7ee77075fab1bd8687c2e7.exe 3944 599ae1495c7ee77075fab1bd8687c2e7.exe 3944 599ae1495c7ee77075fab1bd8687c2e7.exe 3944 599ae1495c7ee77075fab1bd8687c2e7.exe 3944 599ae1495c7ee77075fab1bd8687c2e7.exe 3944 599ae1495c7ee77075fab1bd8687c2e7.exe 3944 599ae1495c7ee77075fab1bd8687c2e7.exe 3944 599ae1495c7ee77075fab1bd8687c2e7.exe 3944 599ae1495c7ee77075fab1bd8687c2e7.exe 3944 599ae1495c7ee77075fab1bd8687c2e7.exe 3944 599ae1495c7ee77075fab1bd8687c2e7.exe 3944 599ae1495c7ee77075fab1bd8687c2e7.exe 3944 599ae1495c7ee77075fab1bd8687c2e7.exe 3944 599ae1495c7ee77075fab1bd8687c2e7.exe 3944 599ae1495c7ee77075fab1bd8687c2e7.exe 3944 599ae1495c7ee77075fab1bd8687c2e7.exe 3944 599ae1495c7ee77075fab1bd8687c2e7.exe 3944 599ae1495c7ee77075fab1bd8687c2e7.exe 3944 599ae1495c7ee77075fab1bd8687c2e7.exe 3944 599ae1495c7ee77075fab1bd8687c2e7.exe 3944 599ae1495c7ee77075fab1bd8687c2e7.exe 3944 599ae1495c7ee77075fab1bd8687c2e7.exe 3944 599ae1495c7ee77075fab1bd8687c2e7.exe 3944 599ae1495c7ee77075fab1bd8687c2e7.exe 3944 599ae1495c7ee77075fab1bd8687c2e7.exe 3944 599ae1495c7ee77075fab1bd8687c2e7.exe 3944 599ae1495c7ee77075fab1bd8687c2e7.exe 3944 599ae1495c7ee77075fab1bd8687c2e7.exe 3944 599ae1495c7ee77075fab1bd8687c2e7.exe 3944 599ae1495c7ee77075fab1bd8687c2e7.exe 3944 599ae1495c7ee77075fab1bd8687c2e7.exe 3944 599ae1495c7ee77075fab1bd8687c2e7.exe 3944 599ae1495c7ee77075fab1bd8687c2e7.exe 3944 599ae1495c7ee77075fab1bd8687c2e7.exe 3944 599ae1495c7ee77075fab1bd8687c2e7.exe 3944 599ae1495c7ee77075fab1bd8687c2e7.exe 3944 599ae1495c7ee77075fab1bd8687c2e7.exe 3944 599ae1495c7ee77075fab1bd8687c2e7.exe 3944 599ae1495c7ee77075fab1bd8687c2e7.exe 3944 599ae1495c7ee77075fab1bd8687c2e7.exe 3944 599ae1495c7ee77075fab1bd8687c2e7.exe 3944 599ae1495c7ee77075fab1bd8687c2e7.exe 3944 599ae1495c7ee77075fab1bd8687c2e7.exe 3944 599ae1495c7ee77075fab1bd8687c2e7.exe 3944 599ae1495c7ee77075fab1bd8687c2e7.exe 3944 599ae1495c7ee77075fab1bd8687c2e7.exe 3944 599ae1495c7ee77075fab1bd8687c2e7.exe 3944 599ae1495c7ee77075fab1bd8687c2e7.exe 3944 599ae1495c7ee77075fab1bd8687c2e7.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 3944 599ae1495c7ee77075fab1bd8687c2e7.exe -
Suspicious use of SendNotifyMessage 1 IoCs
pid Process 3944 599ae1495c7ee77075fab1bd8687c2e7.exe