Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

9f5dbc89ea...c8.exe

windows7_x64

10

9f5dbc89ea...c8.exe

windows10_x64

1

Analysis

  • max time kernel
    138s
  • max time network
    139s
  • platform
    windows10_x64
  • resource
    win10v200430
  • submitted
    18/07/2020, 04:22

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    9f5dbc89ea7f77644b34c6adcc259911fce56cd8204dca704ccfe00e574f2cc8.exe

  • Size

    273KB

  • MD5

    83965bde84f91ac022912025995bb98b

  • SHA1

    ca21e88028fc380209ec8cb240441db1c97d8410

  • SHA256

    9f5dbc89ea7f77644b34c6adcc259911fce56cd8204dca704ccfe00e574f2cc8

  • SHA512

    c699fd2c918a41e816b99d33b38979f808c7dcdb0d764ccfd08bfd09888712b6ad23f2d39b8c46d3dde2958d410a13d2f678a61547d6fd0b96e096feac723dfe

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious behavior: EmotetMutantsSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\9f5dbc89ea7f77644b34c6adcc259911fce56cd8204dca704ccfe00e574f2cc8.exe
    "C:\Users\Admin\AppData\Local\Temp\9f5dbc89ea7f77644b34c6adcc259911fce56cd8204dca704ccfe00e574f2cc8.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: EmotetMutantsSpam
    PID:3656

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3656-0-0x0000000002250000-0x000000000225C000-memory.dmp

    Filesize

    48KB

    Download

  • memory/3656-1-0x0000000000400000-0x0000000000449000-memory.dmp

    Filesize

    292KB

    Download