Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
92s -
max time network
126s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
11/07/2024, 19:17
Static task
static1
Behavioral task
behavioral1
Sample
02ff55100153da68db34257a1ddd3150N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
02ff55100153da68db34257a1ddd3150N.exe
Resource
win10v2004-20240709-en
General
-
Target
02ff55100153da68db34257a1ddd3150N.exe
-
Size
419KB
-
MD5
02ff55100153da68db34257a1ddd3150
-
SHA1
8fcdf37a9e38399d978a9050888615263a21f0cb
-
SHA256
a4790638dffc655280faaaf27ad6372164087587a5960ea9860acc2fc2399ea7
-
SHA512
b142d5e63ceda4903882123d84b0e886c9be9757cd022c4e76652f1344a20950f98734fc7d6a651bc2abd9abc83ef890a648c4d63d462a078a5202946d465baf
-
SSDEEP
6144:PobjEXSzaltvWwezOstpX93E7dmEQjpdGHDRbQ8kiNQPQkub2tiet:PobjEXj7l2+/QTAYHaDet
Malware Config
Signatures
-
Looks up external IP address via web service 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
flow ioc 19 api.ipinfodb.com -
Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 3540 02ff55100153da68db34257a1ddd3150N.exe 3540 02ff55100153da68db34257a1ddd3150N.exe 3540 02ff55100153da68db34257a1ddd3150N.exe 3540 02ff55100153da68db34257a1ddd3150N.exe