Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
147s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system -
submitted
15/04/2024, 20:36
Static task
static1
Behavioral task
behavioral1
Sample
xksj/新云软件.url
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
xksj/新云软件.url
Resource
win10v2004-20240412-en
Behavioral task
behavioral3
Sample
xksj/新酷Newcool CMS.exe
Resource
win7-20240215-en
Behavioral task
behavioral4
Sample
xksj/新酷Newcool CMS.exe
Resource
win10v2004-20240412-en
General
-
Target
xksj/新酷Newcool CMS.exe
-
Size
7.7MB
-
MD5
fbfd16b504dbb1af2a56ba0e1ec5ed75
-
SHA1
a77fef636da9c8e48cfc1baa7e91494a7bc629ee
-
SHA256
11cc5cf2a0d2a3097829017ce0dcf1513f63652d2c1f2a134d24dae79c24dac5
-
SHA512
0fba21ec0de410bcc1bb07d692454bdb944afc1d149747c29979d3b002b26f0874e26cb8c17a364026e6d5d2c2ebe253788b5611867b59fe4460d8f38b793031
-
SSDEEP
196608:wnNRIqIIKQefQcyW70bZ0IR7I+Drs+nEaNendpl8fFTd1u/H:lqGocA0S1TUdj8fb1uv
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2932 新酷Newcool CMS.exe 2932 新酷Newcool CMS.exe