Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

6b8f190984...79.exe

windows7-x64

9

6b8f190984...79.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    134s
  • max time network
    103s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24/05/2024, 01:52

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    6b8f190984bfa7f8967223dfba76c65542e15b3af578f36ddec52cfd5b93fc79.exe

  • Size

    5.7MB

  • MD5

    9987ad672e790af1c0773b70a2113702

  • SHA1

    fd00ab1cde3f5a120591a3c5225197739db09bb5

  • SHA256

    6b8f190984bfa7f8967223dfba76c65542e15b3af578f36ddec52cfd5b93fc79

  • SHA512

    b62571aef3913a959ce95b22a86b3a0606fffef668a6a46b747ee46fd98b8bede5a3422957c72ae9d5f09187778395c6fd99323973585705f1d19c40e672293b

  • SSDEEP

    98304:+dHMC+By0AOzWeGlPCk2IabgwxXQ6lXtGscl5M1QN7pA2q7NOLhkV5idp1:+/SACkCkyhXQ6ldGsTQN7pDdkjir1

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SendNotifyMessage 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\6b8f190984bfa7f8967223dfba76c65542e15b3af578f36ddec52cfd5b93fc79.exe
    "C:\Users\Admin\AppData\Local\Temp\6b8f190984bfa7f8967223dfba76c65542e15b3af578f36ddec52cfd5b93fc79.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    PID:3824

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\yjs_log\log.log
    Filesize

    652B

    MD5

    1243261d4d45c9cf31eb302969616c59

    SHA1

    a3f05f1de035a214db2d2e34f98194fea4cf2529

    SHA256

    527185ab79c06aa62b0c88f692cc037d2e933ab901c4d5d87449048993b847fd

    SHA512

    9732d271ce4f74f035ce7977fbbcff655c73e1a06c49189f2b96589e48243e8289c3f90bc51d9602b1869c7d5fb42e93463ed09f31ac7a3bda47b2338eb301ea

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\yjs_log\log.log
    Filesize

    4KB

    MD5

    1578148c8f422c5b9984e01262cb84c9

    SHA1

    2f2a509c475c5fc5baf1b2d3ae4f83b9e4fbf8d4

    SHA256

    c1beb3340f9b8a7b99ff5777835117599434fb2d86ca1f77312cbf313d11da25

    SHA512

    cdfb4d78a380cf6757c23bdff61392f456c9796d4e20a0da483de6ad8f300fa2583e6225550d98a237002c647cbe9d4574fa7a924e854b53a5f0e54417dc8f9d

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\yjs_log\log.log
    Filesize

    310B

    MD5

    cd5caeb969996bf5f98c5fccb3cd5a07

    SHA1

    0ce7d5bf7c25d02e1cac097ebe97126b0a23ef9e

    SHA256

    566748bfd6de0efe965894579788154624b7006e43b6e83d08f86776c1682631

    SHA512

    499073a0ae546af4567b67d77faaed0ff1a7881c325f4f63a378a63b89db5aafdaab7a68f149b66cfd6a07080c0609b916aff9bb9972e2b48b7b80aef6bb2472

    Download Submit