Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
158s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
11/03/2024, 16:57
General
-
Target
$LOCALAPPDATA/Microsoft/Windows Searchbox/searchboxcfg.exe
-
Size
407KB
-
MD5
dc69eb8aea7fd76a9acb740f3b46e445
-
SHA1
28c5bc35621319024e4828d17704fceb7e8e3246
-
SHA256
ceaefb320c8b371f8a799ee61f7165cf8664a8c954cebc3b131a5729139280c0
-
SHA512
80f9469cb64201d0a66688db796709d95f54a8bc959510421b92076eebfde745348d1507e5cfa64dc7aabd2e8b250f727dd008e1345e32f4bd6b56c442374d33
-
SSDEEP
12288:CA0CPyGQuaxkAC69V8jEbViN9VAM9pGHNu4B2U1nN:CEPlQXkAC6IjatI4rB
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\$LOCALAPPDATA\Microsoft\Windows Searchbox\searchboxcfg.exe"C:\Users\Admin\AppData\Local\Temp\$LOCALAPPDATA\Microsoft\Windows Searchbox\searchboxcfg.exe"1⤵
- Adds Run key to start application
- Suspicious use of SetWindowsHookEx