Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
145s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
10/10/2024, 14:59
General
-
Target
qqxwwycjshy_piaodown/炫舞网页抽奖三合一能版本.vmp.exe
-
Size
8.1MB
-
MD5
a2aa73cbf55fc36dbdafa4d019468f18
-
SHA1
310cfaa1166b931741e054324ab7fbd8470625f9
-
SHA256
d25bd976db50b3bc66a98a2113aa199499b1155456cb8e25d24441565265e069
-
SHA512
7915f8340dfa092f89f6de69164f9b6e154dae879b687b311889232c26b6fddd9766f61012a00055b9c8cff23e49bc694ade12d97a6bef0152205511a69658ab
-
SSDEEP
196608:dSsK31X1MPQj0ZPJh5UmxlHHQWC40ELACCyx:eFFuQwjxlHHQWC40sACJx
Score
7/10
Malware Config
Signatures
-
VMProtect packed file 3 IoCs
Detects executables packed with VMProtect commercial packer.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\qqxwwycjshy_piaodown\炫舞网页抽奖三合一能版本.vmp.exe"C:\Users\Admin\AppData\Local\Temp\qqxwwycjshy_piaodown\炫舞网页抽奖三合一能版本.vmp.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
16.0MB
-
Filesize
16.0MB
-
Filesize
16.0MB