Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    128s
  • max time network
    142s
  • platform
    windows10_x64
  • resource
    win10v200430
  • submitted
    17/07/2020, 22:21

General

  • Target

    ac8bc7e4c0d4fb4f7f35b3b0d44c42da583c5a04c12849f4e7f083062d41f19c.exe

  • Size

    273KB

  • MD5

    f221d3ef743f58d447faa068ab95be39

  • SHA1

    36b34c681796c77f522b8adc1d2d27cb483e63cf

  • SHA256

    ac8bc7e4c0d4fb4f7f35b3b0d44c42da583c5a04c12849f4e7f083062d41f19c

  • SHA512

    19a1a15cf92f303cdf497ecce334ae934037f36bddda4a90f0c2e96dc3225b66336a129ce7e88318032823ae87780ca391582a39193a87f0b07d9c3eaeb78448

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious behavior: EmotetMutantsSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ac8bc7e4c0d4fb4f7f35b3b0d44c42da583c5a04c12849f4e7f083062d41f19c.exe
    "C:\Users\Admin\AppData\Local\Temp\ac8bc7e4c0d4fb4f7f35b3b0d44c42da583c5a04c12849f4e7f083062d41f19c.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: EmotetMutantsSpam
    PID:1500

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1500-0-0x0000000002320000-0x000000000232C000-memory.dmp

    Filesize

    48KB

  • memory/1500-1-0x0000000000400000-0x0000000000449000-memory.dmp

    Filesize

    292KB