Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
144s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20240221-en -
resource tags
arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system -
submitted
23/02/2024, 23:35
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
a0a38c067cf41ee3fc6a537a71db8e11.exe
Resource
win7-20240220-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
a0a38c067cf41ee3fc6a537a71db8e11.exe
Resource
win10v2004-20240221-en
1 signatures
150 seconds
General
-
Target
a0a38c067cf41ee3fc6a537a71db8e11.exe
-
Size
147KB
-
MD5
a0a38c067cf41ee3fc6a537a71db8e11
-
SHA1
a9e2743641c5958d7cd2c93288e2ea43056d4466
-
SHA256
2a47b2c1e42229ac014eee59bdc4bb5b5e1aa2d737ddbe320fdf643990182b47
-
SHA512
40367c36d5e9134ece0339b7a3fef6814a38bc491592737ace4de9d3f6fa7abd9f8aa53cede5f016d71713f18aeb7373d5497557d929ea8b1d80c0f6185b410f
-
SSDEEP
3072:PsD2ADkpFGkTXlDJA6ba2esDetNxVgbTGV9X4:PplzpTVDVa2en/V6Mp
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-1712835645-2080934712-2142796781-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\MicroSoftSystem = "C:\\Users\\Admin\\AppData\\Roaming\\MicrosoftSystemRepair.exe" a0a38c067cf41ee3fc6a537a71db8e11.exe