Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
134s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
13/02/2024, 15:33
Static task
static1
Behavioral task
behavioral1
Sample
54da85cdc6edc0a1971ab5f37e823cfe376759d9ec77b6434f5b496553dbc01a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
54da85cdc6edc0a1971ab5f37e823cfe376759d9ec77b6434f5b496553dbc01a.exe
Resource
win10v2004-20231222-en
General
-
Target
54da85cdc6edc0a1971ab5f37e823cfe376759d9ec77b6434f5b496553dbc01a.exe
-
Size
3.8MB
-
MD5
9649552a4ed12e218e27c9d70ffec9b0
-
SHA1
6d3ebbffc08261869ed513018dbd1b122980c7b1
-
SHA256
54da85cdc6edc0a1971ab5f37e823cfe376759d9ec77b6434f5b496553dbc01a
-
SHA512
70379771f272218721f8d465614ab0ac47291d60c1209c4cab0ee0a59e025b439075381a5401fb2a5d47cac3b7cc17ee62aeb6a367a46c9a6ca62da9b677c6eb
-
SSDEEP
98304:esMxljTfGmpXVQvu4VkvLTTP7NrCVbcV4z1:edvljgVIV01
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 408 54da85cdc6edc0a1971ab5f37e823cfe376759d9ec77b6434f5b496553dbc01a.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 408 54da85cdc6edc0a1971ab5f37e823cfe376759d9ec77b6434f5b496553dbc01a.exe 408 54da85cdc6edc0a1971ab5f37e823cfe376759d9ec77b6434f5b496553dbc01a.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
37KB
MD51d5b8ff63ae7882cc6c8ca61921d8707
SHA1806764e66a979c7fb4a1dbccffcfc5414ccd7841
SHA256472a47cca297ee3801cf2aaf75ceb1d7782061afed2ea6882a57c39e2f580169
SHA5129af22906ab47084bc520ae4cd24094a6117442f770b6185ef32d8787c6893d1656b60341c44679651997cd525d387af99098789fbc98647a50e82be2646d377b