Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
19/03/2024, 06:25
Static task
static1
Behavioral task
behavioral1
Sample
伟缘快手1.3.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
伟缘快手1.3.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
新云软件.url
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
新云软件.url
Resource
win10v2004-20240226-en
General
-
Target
伟缘快手1.3.exe
-
Size
3.1MB
-
MD5
95c3ec3de4c372facb845d16cdb9e035
-
SHA1
f871134f906407284147c9170eff2de268873f40
-
SHA256
ddc8cda0b9fdc9f5697751039e82596ed1cfa49b7b524ae5b6dc09e666d7e2c1
-
SHA512
f8d5115d6184668646e95d9abe170f65b693597a0c07f8ddf74eb88add1c7d52e24bedf5496ddd63577ab58a4d5d7209a1d31cacdcd51f983bd12e4c268980e0
-
SSDEEP
98304:WsJjhW+82rEABja2Uj+dHo65w6PkkxPlQ:Z02Zta2Ujn6tLxm
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 4852 伟缘快手1.3.exe 4852 伟缘快手1.3.exe 4852 伟缘快手1.3.exe 4852 伟缘快手1.3.exe 4852 伟缘快手1.3.exe 4852 伟缘快手1.3.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 4852 伟缘快手1.3.exe 4852 伟缘快手1.3.exe