Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
50s -
max time network
16s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
28/05/2024, 19:43
Static task
static1
Behavioral task
behavioral1
Sample
Setup_FileViewPro_2024.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
Setup_FileViewPro_2024.exe
Resource
win10v2004-20240508-en
General
-
Target
Setup_FileViewPro_2024.exe
-
Size
1.3MB
-
MD5
9462e2b4992e3ea63f3f04c499dc5a05
-
SHA1
9e57c55d9d51d6eabda71ffdfaf48709209943e2
-
SHA256
46cdc38806d00295bb3d6c87a2d06a3aefe648c8a1bb7e7aa54abe37019a96aa
-
SHA512
3f5d68ceeb34a24a91a2718e645564dbc2c6a75d018a517f9884f1a228140ee00f5108e00d43f3feeaf5f40cf391a44d81ec90fd63d445ecb1e3f2675dd3f13d
-
SSDEEP
24576:ih6SVFzDl6eZmL4v9IoYOlrQ14T1+G05hKwzlXX8l8whkwBY2/+WLHkO4H:K6UXtvDz85hK8XM8rcY/OI
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main Setup_FileViewPro_2024.exe -
Suspicious use of SetWindowsHookEx 8 IoCs
pid Process 1680 Setup_FileViewPro_2024.exe 1680 Setup_FileViewPro_2024.exe 1680 Setup_FileViewPro_2024.exe 1680 Setup_FileViewPro_2024.exe 1680 Setup_FileViewPro_2024.exe 1680 Setup_FileViewPro_2024.exe 1680 Setup_FileViewPro_2024.exe 1680 Setup_FileViewPro_2024.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.6MB
MD51938c8aba656a7661565ceb7ea8b5b94
SHA1ab5e8279d90b240b58d35d13d27fb7e92bb77741
SHA256fba5162e6a34f8d0d53254ba0b348714956100035c1935c0294e190c75b0de2c
SHA512f17b83aaa10ec88ba851be7fa3670c2ab921770669e32934c791da5b0b70518c0c577fdea37247170e880bd171f011113e526121efbc46a559266e7eafe66ec8