Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
142s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
18/01/2024, 01:20
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
641b9d398165fc239dc87ad0878ca009.exe
Resource
win7-20231215-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
641b9d398165fc239dc87ad0878ca009.exe
Resource
win10v2004-20231215-en
3 signatures
150 seconds
General
-
Target
641b9d398165fc239dc87ad0878ca009.exe
-
Size
817KB
-
MD5
641b9d398165fc239dc87ad0878ca009
-
SHA1
6bec9bc2fd8a02a90a362c9f593441d0ead466cd
-
SHA256
4094f7b5c3cf894e0fc5c4bd87d4df4ec3fb64934029b3aac858c9c8c7f6e70c
-
SHA512
520c91b0f364d9f98c7f0a33a9c6e9ebaddf9a3894df8a36cc29d89169cd4d8a80ed411a571967d69d7f4830763555ea0d9bba4113ec76ef08c7584f7243e2fe
-
SSDEEP
12288:h97Hminm5F9AU6Tni5M1tLJ3VmN3TVEgqS9qgP7fgIFPWnWuBDj//Xg/LJNRsT0Z:hm5MTPJlVmNigq5wgsWnJ+/lBMQ9X
Score
1/10
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4812 641b9d398165fc239dc87ad0878ca009.exe -
Suspicious use of SendNotifyMessage 1 IoCs
pid Process 4812 641b9d398165fc239dc87ad0878ca009.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 4812 641b9d398165fc239dc87ad0878ca009.exe 4812 641b9d398165fc239dc87ad0878ca009.exe 4812 641b9d398165fc239dc87ad0878ca009.exe 4812 641b9d398165fc239dc87ad0878ca009.exe