Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
93s -
max time network
94s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
13/07/2024, 17:46
Static task
static1
Behavioral task
behavioral1
Sample
Z_Admin1.05/Help.chm
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
Z_Admin1.05/Help.chm
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
Z_Admin1.05/Z_Admin.exe
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
Z_Admin1.05/Z_Admin.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
Z_Admin1.05/新云软件.url
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
Z_Admin1.05/新云软件.url
Resource
win10v2004-20240709-en
General
-
Target
Z_Admin1.05/Help.chm
-
Size
211KB
-
MD5
c0fa7947cdd83bad73ecce4890ed1fc4
-
SHA1
bff381cd126b3a048ea51ea12bea2c5f46689c27
-
SHA256
2e305ccdfa8326a0350978f8387691fbfe88978e80f5b00db8de068564e139cc
-
SHA512
7106e6962748f879f89db5ff2f9621980c6c932addaf0f35a84254535261bfce6d398011402e49a6c16be494a4c91022a389f3c1a6efb368ea97a2dc9d0fc722
-
SSDEEP
3072:L/jGNaeVph4upt4yRKzBkmWXQNvAtYtzKlEf0ng08eAGLBm4vvi+A6wuzrxN6:Lr6a0ph4O2Kmm8vmYwlLXUGHvvHkuz+
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 4276 hh.exe 4276 hh.exe