Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
142s -
max time network
158s -
platform
windows10-2004_x64 -
resource
win10v2004-20240221-en -
resource tags
arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system -
submitted
24/02/2024, 04:12
Static task
static1
Behavioral task
behavioral1
Sample
Password.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Password.exe
Resource
win10v2004-20240221-en
Behavioral task
behavioral3
Sample
ViewPass.exe
Resource
win7-20240220-en
Behavioral task
behavioral4
Sample
ViewPass.exe
Resource
win10v2004-20240221-en
Behavioral task
behavioral5
Sample
aRingNT.exe
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
aRingNT.exe
Resource
win10v2004-20240221-en
Behavioral task
behavioral7
Sample
viewpass.chm
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
viewpass.chm
Resource
win10v2004-20240221-en
General
-
Target
viewpass.chm
-
Size
321KB
-
MD5
2be8337083184c5460a72a82f9b06781
-
SHA1
012c6f6546c72fa9b29b9ff7608f2725db8b7d6e
-
SHA256
bb683a801f78875a6d2e0983406bdac6c5f9a63bced96dc93f5ecb4a6baa9107
-
SHA512
98a31c3fa3533483404c7151d0e162e7c78dd45c908e4543afde80ca78798e5608f68cdf52885ed2e3a43c9e5b361724ff993d05a9c956fbfa43f460995401fa
-
SSDEEP
6144:+qchZIQkHzChJD6pgQDSD9cJjcR6BVPGe2Sv1ZwPuKV7f+5z8AY8ps6D0w5qvkv:6PIQkHG6Zm62HtPB7SnYUs6D0wwvkv
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1948 hh.exe 1948 hh.exe