Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
01/07/2024, 09:22
General
-
Target
7ff95b35f10c5050d92dac20243646411be4f6c70796edda11220f58b365bcb8.exe
-
Size
10.4MB
-
MD5
280af05c4e9f9c759e265bb850b841d3
-
SHA1
e9c9f4c2b52e801d520efecbb79b6daf041092ba
-
SHA256
7ff95b35f10c5050d92dac20243646411be4f6c70796edda11220f58b365bcb8
-
SHA512
aceb60e8669f52c9be0af220b49a52b4e3b8246fbde3774e57ba5b931c4e776002508686f474a65d97bb4dd1644ff49286d5655faff2eebe6d39db6532a10cbd
-
SSDEEP
196608:aIWAE8zYqsBmiFm4CTqfG+vTiwnDmNQkJM8uDIYnKO7pl5:WAE8zD4F3e+biSDcQwM8uDuE1
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of FindShellTrayWindow 4 IoCs
-
Suspicious use of SendNotifyMessage 4 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\7ff95b35f10c5050d92dac20243646411be4f6c70796edda11220f58b365bcb8.exe"C:\Users\Admin\AppData\Local\Temp\7ff95b35f10c5050d92dac20243646411be4f6c70796edda11220f58b365bcb8.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.5MB
MD5298f5812023bab65ee23d13ee9489a6e
SHA171e9d7f205e5e7af6907c539c77a3aeea971692f
SHA256fe100d35b034c15ae3b74379f4eedd321c8e4b84fe666b54ee924ca2a8bdca6e
SHA512217258fb7728f61199f913fb98c894077c12a124e1596d1c6c7cfc065d4d2a6e1e03ad950c3321e2a8dcd997fb5c9524f98530db4bcb39f9914ecb5ff0e22dbd