Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
146s -
max time network
102s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
30/05/2024, 04:24
Static task
static1
Behavioral task
behavioral1
Sample
e6ba907dd137725abcd8cb263a2f2b3e34e521e38828950d5d21a5e44b3b5883.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
e6ba907dd137725abcd8cb263a2f2b3e34e521e38828950d5d21a5e44b3b5883.exe
Resource
win10v2004-20240508-en
General
-
Target
e6ba907dd137725abcd8cb263a2f2b3e34e521e38828950d5d21a5e44b3b5883.exe
-
Size
4.2MB
-
MD5
30f40aba9b97f78a6715ebbb2901b6ec
-
SHA1
4db19c622a458b3d3bedcbdbe1d169f0cbfa38e8
-
SHA256
e6ba907dd137725abcd8cb263a2f2b3e34e521e38828950d5d21a5e44b3b5883
-
SHA512
3dc0866ea9f2250dad0ce02e5855fb764a3a3d766b912894b7b17c44f878b56820e98ab23a91173a7bf89f82df440c31412a31e84ead0c85d35661ca102c61a0
-
SSDEEP
98304:Ym12YVrsk9N8ivyhAdsPSQxYkbdgCM0RwfPOFPz5:5VN8iNIS9kGCZRwfP+Pz
Malware Config
Signatures
-
Detects executables manipulated with Fody 1 IoCs
resource yara_rule behavioral2/memory/1328-1-0x0000000000610000-0x0000000000A4C000-memory.dmp INDICATOR_EXE_Packed_Fody