Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

09/07/2024, 02:12

240709-cnczfatcqa 7

09/07/2024, 02:08

240709-ckskqa1cnq 7

Analysis

  • max time kernel
    73s
  • max time network
    80s
  • platform
    windows10-1703_x64
  • resource
    win10-20240611-en
  • resource tags

    arch:x64arch:x86image:win10-20240611-enlocale:en-usos:windows10-1703-x64system
  • submitted
    09/07/2024, 02:12

General

  • Target

    2019FZQ解码软件英文版V1.0.0.5.191106.exe

  • Size

    512KB

  • MD5

    94d6ff845d0b61f872450c9f920234d9

  • SHA1

    710a6d11f79a7a07105984944a35f808a9d0b35a

  • SHA256

    95aac800aff009f304acfe9f59984ac0a0761871928078ff41eb730cc31c6e57

  • SHA512

    333a1a2fdebd0bad51c4aabad0dbca76d30487681c8cda46fa5b90316720613f398d55a9001db7c2454a19d1a216f78ed5c10cd11039379b2356116c98dee72d

  • SSDEEP

    12288:+n37QgRszgrVgzgivLjf1j2oZIIBXmrmlKCyj6:YUiCgBSvLjtVZIlr7Cyj

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 5 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2019FZQ解码软件英文版V1.0.0.5.191106.exe
    "C:\Users\Admin\AppData\Local\Temp\2019FZQ解码软件英文版V1.0.0.5.191106.exe"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    PID:1940

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\ProgramData\2014FZQData\ad_2018_en.jpg

    Filesize

    74KB

    MD5

    7ad59c2a69134867d8fb388f46dfc436

    SHA1

    5a5ff02fd557b52c9c840ada2cd771229fb57c19

    SHA256

    7c7c0a02848a18ce40c5d80642efec1f49a621058d2456e3f3579109e1a54fe6

    SHA512

    c9352d6350ac8c356a334276ec696788e256b6d3694fb057e110cdd57d3b474540b673bf8134c9b376c86664de8c686e4ae69b2f1642e6a05cbe946bfe4459c7

  • memory/1940-0-0x0000000000400000-0x0000000000554000-memory.dmp

    Filesize

    1.3MB

  • memory/1940-10-0x0000000000400000-0x0000000000554000-memory.dmp

    Filesize

    1.3MB

  • memory/1940-12-0x0000000000400000-0x0000000000554000-memory.dmp

    Filesize

    1.3MB

  • memory/1940-15-0x0000000000400000-0x0000000000554000-memory.dmp

    Filesize

    1.3MB

  • memory/1940-17-0x0000000000400000-0x0000000000554000-memory.dmp

    Filesize

    1.3MB