Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
141s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
28/01/2024, 03:34
Behavioral task
behavioral1
Sample
7c0a7ee9adc543002bfbd44f76d3d16b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7c0a7ee9adc543002bfbd44f76d3d16b.exe
Resource
win10v2004-20231215-en
General
-
Target
7c0a7ee9adc543002bfbd44f76d3d16b.exe
-
Size
841KB
-
MD5
7c0a7ee9adc543002bfbd44f76d3d16b
-
SHA1
2e2767f7009b9f0f2188846f6b04b7aa4370ef09
-
SHA256
147695187ec56632857679d42fa7ccfbb79bc3ada3410b99624041e29e269aa9
-
SHA512
473aabf590887a35d917e2760542b5f2ffb0ddbb4fe92dfaa354855ec0f12d9c256c5a64a4ee06b6b61199c38a73356107ec8472a45d8446e81da25a511dc8f1
-
SSDEEP
12288:TGWVC/ONsG69GtAFS5zJCxihkIPIC09tP54khIdokA2efYaDL:90WX69GtAgIX36dod1YaDL
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/1240-0-0x00000000004F0000-0x0000000000766000-memory.dmp upx behavioral2/memory/1240-4-0x00000000004F0000-0x0000000000766000-memory.dmp upx -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1240 7c0a7ee9adc543002bfbd44f76d3d16b.exe -
Suspicious use of SendNotifyMessage 1 IoCs
pid Process 1240 7c0a7ee9adc543002bfbd44f76d3d16b.exe -
Suspicious use of SetWindowsHookEx 14 IoCs
pid Process 1240 7c0a7ee9adc543002bfbd44f76d3d16b.exe 1240 7c0a7ee9adc543002bfbd44f76d3d16b.exe 1240 7c0a7ee9adc543002bfbd44f76d3d16b.exe 1240 7c0a7ee9adc543002bfbd44f76d3d16b.exe 1240 7c0a7ee9adc543002bfbd44f76d3d16b.exe 1240 7c0a7ee9adc543002bfbd44f76d3d16b.exe 1240 7c0a7ee9adc543002bfbd44f76d3d16b.exe 1240 7c0a7ee9adc543002bfbd44f76d3d16b.exe 1240 7c0a7ee9adc543002bfbd44f76d3d16b.exe 1240 7c0a7ee9adc543002bfbd44f76d3d16b.exe 1240 7c0a7ee9adc543002bfbd44f76d3d16b.exe 1240 7c0a7ee9adc543002bfbd44f76d3d16b.exe 1240 7c0a7ee9adc543002bfbd44f76d3d16b.exe 1240 7c0a7ee9adc543002bfbd44f76d3d16b.exe