Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
50s -
max time network
62s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
-
submitted
01/10/2022, 22:02
General
-
Target
ef5373ac68ecd1c0303a3729d4a08ab20b3abba7a2b05fcdf99866e34e99848b.exe
-
Size
1.0MB
-
MD5
61b630f8c0d5d694d92b4ecf9aa4053c
-
SHA1
8978f4b11014564ea6daa9799b2ff6640e22e77e
-
SHA256
ef5373ac68ecd1c0303a3729d4a08ab20b3abba7a2b05fcdf99866e34e99848b
-
SHA512
2acd0a79f03c67f4deeaab487c70d40b65f872eeed42c961eb776c1c9f4f585d44e6ae5c3b22ae676a44a5116f300c1900bd678e041fa65a0ec933ce36bdb7ec
-
SSDEEP
12288:7XBnuQyPmynSSl46s9bJ3SjLlT5O6r82d+nDdV2m99xgtrSUNzyNYQypND:7XButeynSDxJCw/emNgtrSUNkAD
Score
7/10
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Suspicious use of SetThreadContext 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
-
Suspicious use of WriteProcessMemory 11 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ef5373ac68ecd1c0303a3729d4a08ab20b3abba7a2b05fcdf99866e34e99848b.exe"C:\Users\Admin\AppData\Local\Temp\ef5373ac68ecd1c0303a3729d4a08ab20b3abba7a2b05fcdf99866e34e99848b.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\ef5373ac68ecd1c0303a3729d4a08ab20b3abba7a2b05fcdf99866e34e99848b.exe"C:\Users\Admin\AppData\Local\Temp\ef5373ac68ecd1c0303a3729d4a08ab20b3abba7a2b05fcdf99866e34e99848b.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
968KB
-
Filesize
968KB
-
Filesize
968KB
-
Filesize
968KB
-
Filesize
968KB
-
Filesize
968KB
-
Filesize
968KB
-
Filesize
8KB
-
Filesize
968KB
-
Filesize
968KB
-
Filesize
968KB