Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
7imetool/IMETool.exe
windows7-x64
7imetool/IMETool.exe
windows10-2004-x64
7imetool/indicdll.dll
windows7-x64
1imetool/indicdll.dll
windows10-2004-x64
1imetool/internat.exe
windows7-x64
1imetool/internat.exe
windows10-2004-x64
1imetool/�...��.url
windows7-x64
1imetool/�...��.url
windows10-2004-x64
1Analysis
-
max time kernel
148s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
14/07/2024, 10:56
Behavioral task
behavioral1
Sample
imetool/IMETool.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
imetool/IMETool.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
imetool/indicdll.dll
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
imetool/indicdll.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
imetool/internat.exe
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
imetool/internat.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
imetool/新云软件.url
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
imetool/新云软件.url
Resource
win10v2004-20240709-en
General
-
Target
imetool/internat.exe
-
Size
20KB
-
MD5
d7a0878d2cd84f9cb540bcd7456ef431
-
SHA1
50994566ed151975137ec6eaa8d1e385be6e671c
-
SHA256
0385562194b5daa4a9d927469afc7615054fe785a58e0fa6a2ed1fc2c027957f
-
SHA512
043e8a80fe0e4724edbbb7ad01b32014ef46b32dd65fad22efc060b899c8b6e7b404c7945671de1deb87176d9389885b287fec0eae35d4dc8e5e59f74c428df3
-
SSDEEP
384:7mmEeskQvTL5d/FVKKSfQISNWv+UO+uH0C84CJtkw6EmBaydmr9cWZtW:7zO3d/FVwfQhNWu+uHQ4CJtkBEmm9D
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1972 internat.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1972 internat.exe 1972 internat.exe