Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
91s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
19/01/2024, 05:33
Static task
static1
Behavioral task
behavioral1
Sample
IconXP/help.chm
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
IconXP/help.chm
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
IconXP/iconxp.exe
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
IconXP/iconxp.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral5
Sample
IconXP/安装必看.url
Resource
win7-20231129-en
Behavioral task
behavioral6
Sample
IconXP/安装必看.url
Resource
win10v2004-20231215-en
General
-
Target
IconXP/help.chm
-
Size
378KB
-
MD5
3e3140df02cb718aed941c6cbd779090
-
SHA1
1e717aeeff91ac72120f21712fd57adb33528ed8
-
SHA256
9bcb8b4b107ffa492ef987ea1c8b362162df8d8247613115e7ab161f727cc7aa
-
SHA512
b823c235cf49305453295a612439e796677fb7849aebe6c56f42f8e2675812a899038d34976f9e713230a5db48934dbb66dfd40b7d079fb35cabeac58b003f76
-
SSDEEP
6144:vOLtZUSgtWERYLuDJAMsvVIstV5MjlvheBT1wLhV3IVD2pSq0wHBn5GJqOofw:yedWERfJAMe6jlYTWNU8p0KBn575fw
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1408 hh.exe 1408 hh.exe