Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
140s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
19/01/2024, 12:51
Static task
static1
Behavioral task
behavioral1
Sample
luokebaoyu/最火软件站.url
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
luokebaoyu/最火软件站.url
Resource
win10v2004-20231222-en
Behavioral task
behavioral3
Sample
luokebaoyu/洛克王国暴雨辅助V17.6.exe
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
luokebaoyu/洛克王国暴雨辅助V17.6.exe
Resource
win10v2004-20231215-en
General
-
Target
luokebaoyu/洛克王国暴雨辅助V17.6.exe
-
Size
5.0MB
-
MD5
fde0635a37703f409d30d2f8eb14fb29
-
SHA1
1b55095e4d64f04995d473e36ffef3614362f3ee
-
SHA256
1c02d0a308206e6dd2bda1404c4e45204705c95fe2558c291f35a81a75bbabc9
-
SHA512
ee5287cac7723652c8e472dde28744eb1ae9d36648d6313abd49bf72b195051f6a1406ce217376377232b17348b9cad3767308e10d3ff25f9918c0067b2816c6
-
SSDEEP
98304:yQMjRICEU+VPB7mEwEBDudm0m+She4uXL:yQJCmmE3BDudm0m+Ce
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 4892 洛克王国暴雨辅助V17.6.exe 4892 洛克王国暴雨辅助V17.6.exe 4892 洛克王国暴雨辅助V17.6.exe 4892 洛克王国暴雨辅助V17.6.exe