Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
293s -
max time network
299s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system -
submitted
07/08/2024, 02:04
Static task
static1
Behavioral task
behavioral1
Sample
202407名单.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
202407名单.exe
Resource
win10-20240404-en
Behavioral task
behavioral3
Sample
202407名单.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral4
Sample
GBgvQcZI.exe
Resource
win7-20240705-en
Behavioral task
behavioral5
Sample
GBgvQcZI.exe
Resource
win10-20240404-en
Behavioral task
behavioral6
Sample
GBgvQcZI.exe
Resource
win10v2004-20240802-en
General
-
Target
202407名单.exe
-
Size
11.1MB
-
MD5
4981608f030982bea9c2c6defab80a5d
-
SHA1
b15cf8423eb62e29812a81066adecfe31e5be743
-
SHA256
8dc8867273f93678845ec8dfdfd84af24ab606121c3c076a0f6c5228e5cea862
-
SHA512
fffab8d7a2cd3f3f99db5b5093ad80dbc6013aabe7a8be488c8e3bccf01562b48cb760d29066790e8b577f21cbc033a0602936b92c758d154cc5b9a11abf2d65
-
SSDEEP
6144:uBGnXixYRgmR8Ltknr2iW18eHxaVjSB1zVJJSB:8GnXixpo8xjaVjSB1zVJJw
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 16 IoCs
pid Process 824 202407名单.exe 824 202407名单.exe 824 202407名单.exe 824 202407名单.exe 824 202407名单.exe 824 202407名单.exe 824 202407名单.exe 824 202407名单.exe 824 202407名单.exe 824 202407名单.exe 824 202407名单.exe 824 202407名单.exe 824 202407名单.exe 824 202407名单.exe 824 202407名单.exe 824 202407名单.exe