Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
41s -
max time network
49s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
04/07/2024, 15:05
Static task
static1
Behavioral task
behavioral1
Sample
4d24024514f038b3f482ebc0d2ad3be24973452de09d38367586017633bea311.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4d24024514f038b3f482ebc0d2ad3be24973452de09d38367586017633bea311.exe
Resource
win10v2004-20240508-en
General
-
Target
4d24024514f038b3f482ebc0d2ad3be24973452de09d38367586017633bea311.exe
-
Size
9.2MB
-
MD5
fba5263c42f27f7e584425634eca3fc8
-
SHA1
73f81e6eabf10a2371eaa93dd7fb47bf9018667b
-
SHA256
4d24024514f038b3f482ebc0d2ad3be24973452de09d38367586017633bea311
-
SHA512
bbcda774e2ea8a5cf732e88ecbc0a62cfd1dad9815ece1e1478ce14bb9039b3fd0b1bd5d6c31dc6c759d7a2f514f3dadc4c151b6ba90d29e9f1e125f37281b00
-
SSDEEP
196608:7EpPqitlegevcAbzxWUklvP4EeRDc6aKiL6oBJsZZF6lPE5UQ:YciCguXkp4EeRHZiLPSFqlQ
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 4884 4d24024514f038b3f482ebc0d2ad3be24973452de09d38367586017633bea311.exe 4884 4d24024514f038b3f482ebc0d2ad3be24973452de09d38367586017633bea311.exe 4884 4d24024514f038b3f482ebc0d2ad3be24973452de09d38367586017633bea311.exe 4884 4d24024514f038b3f482ebc0d2ad3be24973452de09d38367586017633bea311.exe 4884 4d24024514f038b3f482ebc0d2ad3be24973452de09d38367586017633bea311.exe 4884 4d24024514f038b3f482ebc0d2ad3be24973452de09d38367586017633bea311.exe