Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
113s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
27/01/2024, 07:33
Static task
static1
Behavioral task
behavioral1
Sample
79a4be9c06f2d6acd0f24adde9488037.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
79a4be9c06f2d6acd0f24adde9488037.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
$TEMP/biclient.exe
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
$TEMP/biclient.exe
Resource
win10v2004-20231215-en
General
-
Target
$TEMP/biclient.exe
-
Size
219KB
-
MD5
c66293ccd7cbe84b1b8f393ca5e4e6d7
-
SHA1
c24089d407e6280b79bec86532e9de0118e4de71
-
SHA256
ffbae29e2f233767fd42909720497165ce3552427ef93efb2fc714fb4204755f
-
SHA512
7ff97aa71f182035f90ba10c3bf8087280e3f34bf717bda139d642f4e043c64aa2b98d82a90a32f1df4b76f9d7610af62390fe934e514c90c703381a421c00b7
-
SSDEEP
3072:bn9mtkIrxidB8D+WS6nj+fgOclZDeVxn/pkcgVLbQJR+6QWZb54vVsSIVT6:aXxK2jmXcEVVvgVLbQbZWc
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1116 biclient.exe 1116 biclient.exe