Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Resubmissions
18/01/2024, 21:47
240118-1m8ayshghp 318/01/2024, 21:42
240118-1kd94ahgdk 118/01/2024, 21:39
240118-1h5dhaafa4 1Analysis
-
max time kernel
113s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
18/01/2024, 21:42
Static task
static1
Behavioral task
behavioral1
Sample
Transfer.zip
Resource
win10v2004-20231215-en
0 signatures
150 seconds
General
-
Target
Transfer.zip
-
Size
5.4MB
-
MD5
76858473faa3cd24afaa80a497d71543
-
SHA1
9a6ccea9e64a6698ec89ef4009f09e066f403e5e
-
SHA256
1ae6b221201d824a9fdc85556293df398398a85645bb27ef75fb8ebd26bbb624
-
SHA512
d843a1d4971227b51c5e2c5f31e5abd044f19ec5389c5087badf1e99dd4e714ed4232980aaba935f80c7c5af02bcfa982578a6c4b6bf0fcbd9206e333c6cf06f
-
SSDEEP
98304:GbCeI+DhOdV2IMqlVriYoxAh8Yzg3Wsn0Nfzm9hlIoRjx29hnXrcbOPy:vec3DBRJSWPNfzm9hSe0Xcb/
Score
1/10
Malware Config
Signatures
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\Transfer.zip1⤵PID:3044
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:752
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalService -p -s fdPHost1⤵PID:1404