Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
-
submitted
23/04/2024, 01:35
General
-
Target
RV Envo de Factura 406000844.exe
-
Size
669KB
-
MD5
0ee902b77891a00a701443c7435bb7ff
-
SHA1
8dd9369c138fe01d56588f99ffee600d6f1147bc
-
SHA256
823933e7a978133c5ecfbdf670263ce325b06205405a9989208b23bca6529f2b
-
SHA512
446707d16a9770518eea65f97255379b1113a5938c8d6b130e342129310e7df91808d1273fe47b794eb084e4d61e2745dbbc08c2240a44eb122f30392f20df98
-
SSDEEP
12288:OsHzOUNUSB/o5LsI1uwajJ5yvv1l2nlJ0CCgvtsqkaaLEceMuRGIqTNv:xiUmSB/o5d1ubcvC4us5TUMjrNv
Score
7/10
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of SendNotifyMessage 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\RV Envo de Factura 406000844.exe"C:\Users\Admin\AppData\Local\Temp\RV Envo de Factura 406000844.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.5MB
-
Filesize
16KB
-
Filesize
1.5MB