Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Resubmissions
22/02/2024, 00:12
240222-ahcqdaha4v 722/02/2024, 00:09
240222-afnpvsgh9v 322/02/2024, 00:02
240222-abxrzahd64 3Analysis
-
max time kernel
42s -
platform
windows11-21h2_x64 -
resource
win11-20240221-en -
resource tags
arch:x64arch:x86image:win11-20240221-enlocale:en-usos:windows11-21h2-x64system -
submitted
22/02/2024, 00:09
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
PokemonInfiniteFusionInstaller.zip
Resource
win11-20240221-en
0 signatures
1200 seconds
General
-
Target
PokemonInfiniteFusionInstaller.zip
-
Size
25.7MB
-
MD5
2bf221aac747c9913068c65b22fcc132
-
SHA1
bd0ba11fd0875f8b30ba050f8e64abc39b871735
-
SHA256
d8b843a10525c69e3d62638ffa2b9ff71d61071dd73766ae53fa8272119d4d3e
-
SHA512
4b6a4097ac845742596f5368af2bda66bc83a541b3bbef92170786107635cc9f866d33ed8c40cf2284f18b2ce358e1e09732bfc7a5068975d992204dcfc431e2
-
SSDEEP
786432:AGHSq+060jk/i2VM5kKv5j3LiTv1Vjcv9Kre657:+L060jsiWqxrLANee
Score
1/10
Malware Config
Signatures
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\PokemonInfiniteFusionInstaller.zip1⤵PID:3440
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:2976