Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

8117d3c660...18.exe

windows7_x64

10

8117d3c660...18.exe

windows10_x64

1

Analysis

  • max time kernel
    142s
  • max time network
    143s
  • platform
    windows10_x64
  • resource
    win10
  • submitted
    17/07/2020, 19:49

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    8117d3c66035471be56084dfc1f2e28d185397b629b79af021a5044d44d58818.exe

  • Size

    276KB

  • MD5

    69275622823c474484e8c24c8cf30107

  • SHA1

    72c1b2c9470a9910f2bdd090a0b88eab495a933e

  • SHA256

    8117d3c66035471be56084dfc1f2e28d185397b629b79af021a5044d44d58818

  • SHA512

    f2b9abe38a6d5125255ca94b2c7830faf8ba75b2a2d9c7565ea29057b89ac020e558382a6d322cbdbee58a9724915fb1768184d33beb9d0184492a383fc1b0ce

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious behavior: EmotetMutantsSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\8117d3c66035471be56084dfc1f2e28d185397b629b79af021a5044d44d58818.exe
    "C:\Users\Admin\AppData\Local\Temp\8117d3c66035471be56084dfc1f2e28d185397b629b79af021a5044d44d58818.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: EmotetMutantsSpam
    PID:2460

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2460-0-0x0000000002320000-0x000000000232C000-memory.dmp

    Filesize

    48KB

    Download

  • memory/2460-1-0x0000000000400000-0x0000000000448000-memory.dmp

    Filesize

    288KB

    Download