Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
97s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
25/09/2024, 09:41
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
clean-dropper.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
clean-dropper.exe
Resource
win11-20240802-en
windows11-21h2-x64
3 signatures
150 seconds
General
-
Target
clean-dropper.exe
-
Size
52KB
-
MD5
f2f61c820696e17b296791a3f2141f29
-
SHA1
e23f84c180906077b59213745f1759262da6796f
-
SHA256
cfbed3a1ad2705ef714add335e74a95dc189228bbe1b51d836200e401d409ddb
-
SHA512
d4d3bee5ddf738d2836e6d15827e5aae711619628ac987706621e9b23f152fd2810272a5c312ee9fb04ee53f2acea1b9fe4f3a2a72c05cdc531b831f44872cc8
-
SSDEEP
768:K+ltkZcFtGrbBEU6vjRVSr7j/Rz8cU5YVI4c7dDHK:KykZckBEU6vCHj5zjmYVhIe
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
pid Process 4180 clean-dropper.exe -
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 4180 clean-dropper.exe 4180 clean-dropper.exe 4180 clean-dropper.exe 4180 clean-dropper.exe 4180 clean-dropper.exe 4180 clean-dropper.exe 4180 clean-dropper.exe 4180 clean-dropper.exe 4180 clean-dropper.exe 4180 clean-dropper.exe 4180 clean-dropper.exe 4180 clean-dropper.exe 4180 clean-dropper.exe 4180 clean-dropper.exe 4180 clean-dropper.exe 4180 clean-dropper.exe 4180 clean-dropper.exe 4180 clean-dropper.exe 4180 clean-dropper.exe 4180 clean-dropper.exe 4180 clean-dropper.exe 4180 clean-dropper.exe 4180 clean-dropper.exe 4180 clean-dropper.exe 4180 clean-dropper.exe 4180 clean-dropper.exe 4180 clean-dropper.exe 4180 clean-dropper.exe 4180 clean-dropper.exe 4180 clean-dropper.exe 4180 clean-dropper.exe 4180 clean-dropper.exe 4180 clean-dropper.exe 4180 clean-dropper.exe 4180 clean-dropper.exe 4180 clean-dropper.exe 4180 clean-dropper.exe 4180 clean-dropper.exe 4180 clean-dropper.exe 4180 clean-dropper.exe 4180 clean-dropper.exe 4180 clean-dropper.exe 4180 clean-dropper.exe 4180 clean-dropper.exe 4180 clean-dropper.exe 4180 clean-dropper.exe 4180 clean-dropper.exe 4180 clean-dropper.exe 4180 clean-dropper.exe 4180 clean-dropper.exe 4180 clean-dropper.exe 4180 clean-dropper.exe 4180 clean-dropper.exe 4180 clean-dropper.exe 4180 clean-dropper.exe 4180 clean-dropper.exe 4180 clean-dropper.exe 4180 clean-dropper.exe 4180 clean-dropper.exe 4180 clean-dropper.exe 4180 clean-dropper.exe 4180 clean-dropper.exe 4180 clean-dropper.exe 4180 clean-dropper.exe -
Suspicious behavior: RenamesItself 1 IoCs
pid Process 4180 clean-dropper.exe