Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

3a101eabbc...81.exe

windows7-x64

9

3a101eabbc...81.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    133s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24/05/2024, 08:40

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    3a101eabbc7a34f6f8257642cace066675a5cce75b81a8371b0d83f00bb6fa81.exe

  • Size

    5.7MB

  • MD5

    f1dc3b202c1f1fed1b762c77e783fb91

  • SHA1

    df9bd55296aec249da1a0a3164b54d91e91478f8

  • SHA256

    3a101eabbc7a34f6f8257642cace066675a5cce75b81a8371b0d83f00bb6fa81

  • SHA512

    a71249a709560b7509693f03a6f90f61b2f88dc5905aff6c3aeae47378b357a267efb67954696efb050ce35609a6e173d1fdbf8c69162aa836bda36b2ac9fad8

  • SSDEEP

    98304:j/6n94bDY2EBcBuq62V///4nAWakrn7S/IhWoaVVfs/VIsMF4JD8iulhq7NmjkV4:mMD+cpvJ/4H3nmghWoa/fsysMF4JD85D

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SendNotifyMessage 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3a101eabbc7a34f6f8257642cace066675a5cce75b81a8371b0d83f00bb6fa81.exe
    "C:\Users\Admin\AppData\Local\Temp\3a101eabbc7a34f6f8257642cace066675a5cce75b81a8371b0d83f00bb6fa81.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    PID:1492

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\yjs_log\log.log
    Filesize

    652B

    MD5

    7c3b3a66e93e1494b5d516a24e5db4cf

    SHA1

    d729b5a8b646305ed2d268b7e39c050cede8c423

    SHA256

    c7a5d7daef6a8100ec482a91e8243835c5438d7cbfd00ff57a31a5db3fced065

    SHA512

    d171abdde235255534de349b67c40a2e9b7f25d9eea4cf1b2de80b9e9058b0f9301f2bcd8c10be7943fff7edf5fb28814eaaddccaf8eb27f7be8f6af19c51522

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\yjs_log\log.log
    Filesize

    4KB

    MD5

    90a40e346b9347fa5f21bc46c44bf5e1

    SHA1

    3ac2e5a38c647fdb67de2f24f6e80c953e314126

    SHA256

    0c65700c2673ad196e12d1dcaadd2758518666ad1440781f24dc97cd3ad302db

    SHA512

    cc91780be94eac24ecb9215e9cfa88a8950d4a29c6cd2dfa015ed8f5e037008677d1c265510a08ddde62cbac747713c80c4314a0173db0a72b42f31c5b2fd6e3

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\yjs_log\log.log
    Filesize

    310B

    MD5

    09c78cc770e0edd08e466b757b09948d

    SHA1

    a97ac0e0f0014f71f1280329e596afd801111a9d

    SHA256

    049103f5922c6eeef0d61edc5743d68d42e462458448302c3b2ec7f2e2407b96

    SHA512

    24a13138c72501558f7f4413af5ec9e881365166d0baeb25a93e1db95c090895a1fe3b7ffca8576c282d1e0a2302a90e4220f409f6d5f28846a89795b2f4c01d

    Download Submit