Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
04/07/2024, 23:28
Static task
static1
Behavioral task
behavioral1
Sample
DClient.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
DClient.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral3
Sample
DShare.exe
Resource
win7-20240508-en
Behavioral task
behavioral4
Sample
DShare.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral5
Sample
新云软件.url
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
新云软件.url
Resource
win10v2004-20240704-en
General
-
Target
DClient.exe
-
Size
397KB
-
MD5
debfd3046e8d276a4158d0ae8b1fef62
-
SHA1
6c24c8b318be0c7b6119454d5ca1b0a9e98dfc5f
-
SHA256
7e378eeee97904608c7d7092be04fd4db5ccd07633c70e120380d251138acb9d
-
SHA512
c6150ee1b3da84bc5684522d968031bd9e75f38823da3975f305df7234dbc47868701bab4d8f59700cd0d084fd1cfdbfe829c0d119d8788c83df50bdf6f737a0
-
SSDEEP
12288:q0gOH02VwZLCHNpiejRpkxQFtbGA4itu5faB:q0TBELCtpie15taAzu5u
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 31 IoCs
pid Process 2924 DClient.exe 2924 DClient.exe 2924 DClient.exe 2924 DClient.exe 2924 DClient.exe 2924 DClient.exe 2924 DClient.exe 2924 DClient.exe 2924 DClient.exe 2924 DClient.exe 2924 DClient.exe 2924 DClient.exe 2924 DClient.exe 2924 DClient.exe 2924 DClient.exe 2924 DClient.exe 2924 DClient.exe 2924 DClient.exe 2924 DClient.exe 2924 DClient.exe 2924 DClient.exe 2924 DClient.exe 2924 DClient.exe 2924 DClient.exe 2924 DClient.exe 2924 DClient.exe 2924 DClient.exe 2924 DClient.exe 2924 DClient.exe 2924 DClient.exe 2924 DClient.exe -
Suspicious use of SendNotifyMessage 31 IoCs
pid Process 2924 DClient.exe 2924 DClient.exe 2924 DClient.exe 2924 DClient.exe 2924 DClient.exe 2924 DClient.exe 2924 DClient.exe 2924 DClient.exe 2924 DClient.exe 2924 DClient.exe 2924 DClient.exe 2924 DClient.exe 2924 DClient.exe 2924 DClient.exe 2924 DClient.exe 2924 DClient.exe 2924 DClient.exe 2924 DClient.exe 2924 DClient.exe 2924 DClient.exe 2924 DClient.exe 2924 DClient.exe 2924 DClient.exe 2924 DClient.exe 2924 DClient.exe 2924 DClient.exe 2924 DClient.exe 2924 DClient.exe 2924 DClient.exe 2924 DClient.exe 2924 DClient.exe