Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Resubmissions
11/03/2024, 00:39
240311-az39nafh6x 1Analysis
-
max time kernel
32s -
max time network
37s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
11/03/2024, 00:39
Static task
static1
Behavioral task
behavioral1
Sample
Bat H.zip
Resource
win10v2004-20240226-en
0 signatures
150 seconds
General
-
Target
Bat H.zip
-
Size
4.8MB
-
MD5
fc33d262af6684e05e444719ba0ce105
-
SHA1
b03c1f11adee6ee1d49b6e45319e68dbc187ec16
-
SHA256
76be34f32f0236395fb59586f9c3dbbb8fbf8fe87a6b578c0d0b04a497522aae
-
SHA512
0a8baa3bfa71cb2e446c80436a130edd2a69a4b904ffa3e4efb934783534b643b8a87c3494baa8ac87594c06474251aa00804b777fc9b7703879ba2fd30b36c6
-
SSDEEP
98304:GbnOeFRX7lByrs1lMhKViqw3O6xYdZ/uoctgyI2g2va/w5Pwu6i3K7AXzzB:GbnTFt76TKors1ct5Bg2va/iPwIXzzB
Score
1/10
Malware Config
Signatures
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,"C:\Users\Admin\AppData\Local\Temp\Bat H.zip"1⤵PID:2560
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:1236