Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
129s -
max time network
122s -
platform
windows10-2004_x64 -
resource
win10v2004-20240419-en -
resource tags
arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system -
submitted
08/05/2024, 03:26
Static task
static1
Behavioral task
behavioral1
Sample
ba7f2b9cb16d0034d0d1694d68aed0b89e778c3dbb19e43ecd16ef089f786257.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ba7f2b9cb16d0034d0d1694d68aed0b89e778c3dbb19e43ecd16ef089f786257.exe
Resource
win10v2004-20240419-en
General
-
Target
ba7f2b9cb16d0034d0d1694d68aed0b89e778c3dbb19e43ecd16ef089f786257.exe
-
Size
982KB
-
MD5
90b2e7314420828beca225d7b43607cc
-
SHA1
2826150e206b7d039253d5355ad9ca97d5dbfd8e
-
SHA256
ba7f2b9cb16d0034d0d1694d68aed0b89e778c3dbb19e43ecd16ef089f786257
-
SHA512
f638f211e1104ba191da11ceb9ee27239b90dc2718072a7870c53a4cee115b35c9fec8ff68e5486724c898238c08cf1532528b587f89acfbdc1cae20e121f4f4
-
SSDEEP
24576:YGzl9+a4Ne1nEFI56xU+0IdY2Zv952uetfbFEzP4UFhOtiOXOuG:Y+tOWnEFZR0El0JEzQAhvOed
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4132 ba7f2b9cb16d0034d0d1694d68aed0b89e778c3dbb19e43ecd16ef089f786257.exe -
Suspicious use of SendNotifyMessage 1 IoCs
pid Process 4132 ba7f2b9cb16d0034d0d1694d68aed0b89e778c3dbb19e43ecd16ef089f786257.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4132 ba7f2b9cb16d0034d0d1694d68aed0b89e778c3dbb19e43ecd16ef089f786257.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\ba7f2b9cb16d0034d0d1694d68aed0b89e778c3dbb19e43ecd16ef089f786257.exe"C:\Users\Admin\AppData\Local\Temp\ba7f2b9cb16d0034d0d1694d68aed0b89e778c3dbb19e43ecd16ef089f786257.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:4132