Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
09/04/2024, 22:11
Static task
static1
Behavioral task
behavioral1
Sample
3927739ac2e7e46beda7869c62c34a12.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
3927739ac2e7e46beda7869c62c34a12.exe
Resource
win10v2004-20240226-en
General
-
Target
3927739ac2e7e46beda7869c62c34a12.exe
-
Size
1.0MB
-
MD5
3927739ac2e7e46beda7869c62c34a12
-
SHA1
d0884fdd44de2c539fc1a011cf94a930f01e7ef4
-
SHA256
73b26f02a6afe144b62c1e64f0391a78ef80a6546a10c1d31d19aec2cc85e45b
-
SHA512
59deac893ac3955dfe77654fb9c8cdd3ff8f3a166ff6cba253fb400188663b760baf6f992c0409ed90ab445659a17db3594f7b7682e4271c6f9d00d5fa5267a3
-
SSDEEP
24576:tqDEvCTbMWu7rQYlBQcBiT6rprG8aCDHA4Q7NLp3Wg:tTvC/MTQYxsWR7acHA4Q7NLBW
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of FindShellTrayWindow 18 IoCs
pid Process 2932 3927739ac2e7e46beda7869c62c34a12.exe 2932 3927739ac2e7e46beda7869c62c34a12.exe 2932 3927739ac2e7e46beda7869c62c34a12.exe 2932 3927739ac2e7e46beda7869c62c34a12.exe 2932 3927739ac2e7e46beda7869c62c34a12.exe 2932 3927739ac2e7e46beda7869c62c34a12.exe 2932 3927739ac2e7e46beda7869c62c34a12.exe 2932 3927739ac2e7e46beda7869c62c34a12.exe 2932 3927739ac2e7e46beda7869c62c34a12.exe 2932 3927739ac2e7e46beda7869c62c34a12.exe 2932 3927739ac2e7e46beda7869c62c34a12.exe 2932 3927739ac2e7e46beda7869c62c34a12.exe 2932 3927739ac2e7e46beda7869c62c34a12.exe 2932 3927739ac2e7e46beda7869c62c34a12.exe 2932 3927739ac2e7e46beda7869c62c34a12.exe 2932 3927739ac2e7e46beda7869c62c34a12.exe 2932 3927739ac2e7e46beda7869c62c34a12.exe 2932 3927739ac2e7e46beda7869c62c34a12.exe -
Suspicious use of SendNotifyMessage 18 IoCs
pid Process 2932 3927739ac2e7e46beda7869c62c34a12.exe 2932 3927739ac2e7e46beda7869c62c34a12.exe 2932 3927739ac2e7e46beda7869c62c34a12.exe 2932 3927739ac2e7e46beda7869c62c34a12.exe 2932 3927739ac2e7e46beda7869c62c34a12.exe 2932 3927739ac2e7e46beda7869c62c34a12.exe 2932 3927739ac2e7e46beda7869c62c34a12.exe 2932 3927739ac2e7e46beda7869c62c34a12.exe 2932 3927739ac2e7e46beda7869c62c34a12.exe 2932 3927739ac2e7e46beda7869c62c34a12.exe 2932 3927739ac2e7e46beda7869c62c34a12.exe 2932 3927739ac2e7e46beda7869c62c34a12.exe 2932 3927739ac2e7e46beda7869c62c34a12.exe 2932 3927739ac2e7e46beda7869c62c34a12.exe 2932 3927739ac2e7e46beda7869c62c34a12.exe 2932 3927739ac2e7e46beda7869c62c34a12.exe 2932 3927739ac2e7e46beda7869c62c34a12.exe 2932 3927739ac2e7e46beda7869c62c34a12.exe