Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system -
submitted
16/04/2024, 14:13
Static task
static1
Behavioral task
behavioral1
Sample
037d97a54caf7ac856ff007f1f459a9142d05c1e12ec373ac437639691f0ee66.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
037d97a54caf7ac856ff007f1f459a9142d05c1e12ec373ac437639691f0ee66.exe
Resource
win10v2004-20240412-en
General
-
Target
037d97a54caf7ac856ff007f1f459a9142d05c1e12ec373ac437639691f0ee66.exe
-
Size
2.5MB
-
MD5
7efd00e7e374d93f1738d63cc54882bd
-
SHA1
0cbd39cfbd2c3dd3a8b511bf9a8c19b2fb319cb0
-
SHA256
037d97a54caf7ac856ff007f1f459a9142d05c1e12ec373ac437639691f0ee66
-
SHA512
8a1a4b24ba5a7333c307ef8f128e0e2a88d6853515dc8c3a4b2e76c6e5bfe76363e0d0ab38b4a5a3c964faf9b5d8dc201818d5a69569bc333c81791391ecb115
-
SSDEEP
49152:cynv9RzSDhY4/cOmdfDDz9GapH1GJlrjAh5xatb7BmIHQtP:jv989Y6cJDDBGapH1GJlrjAh5xGZHQt
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 636 037d97a54caf7ac856ff007f1f459a9142d05c1e12ec373ac437639691f0ee66.exe 636 037d97a54caf7ac856ff007f1f459a9142d05c1e12ec373ac437639691f0ee66.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 636 037d97a54caf7ac856ff007f1f459a9142d05c1e12ec373ac437639691f0ee66.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\037d97a54caf7ac856ff007f1f459a9142d05c1e12ec373ac437639691f0ee66.exe"C:\Users\Admin\AppData\Local\Temp\037d97a54caf7ac856ff007f1f459a9142d05c1e12ec373ac437639691f0ee66.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:636