Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
138s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
02/10/2022, 04:19
General
-
Target
e7b8535cf54b4ba3a4a208e05ecdbcc533b1accb0e4b567a77f3c272519fd37b.exe
-
Size
146KB
-
MD5
79559c3824adbfb4a049e45acdd0c430
-
SHA1
279b481a18511e5bc3f91ac880002ccb6dd85fd8
-
SHA256
e7b8535cf54b4ba3a4a208e05ecdbcc533b1accb0e4b567a77f3c272519fd37b
-
SHA512
c02b74e57896b70279bf377c56508aa2d830fcfd58ba932dbd97491e1e2a0edd3fa98b76c3601f582d3b5b232d77b163cce8680cd7b74485a9eaf7a7eb644d0a
-
SSDEEP
3072:NYGu635vCsNaoIYtpRc2vNQ8Uv5Z8eSIeOC9MC5Q96AaQdDCeV3:jf5fDpPv6JYeSzOlaYDBV3
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
-
Drops file in System32 directory 2 IoCs
-
Drops file in Windows directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
-
Suspicious use of WriteProcessMemory 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\e7b8535cf54b4ba3a4a208e05ecdbcc533b1accb0e4b567a77f3c272519fd37b.exe"C:\Users\Admin\AppData\Local\Temp\e7b8535cf54b4ba3a4a208e05ecdbcc533b1accb0e4b567a77f3c272519fd37b.exe"1⤵
- Loads dropped DLL
- Drops file in System32 directory
- Drops file in Windows directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\svchost.exesvchost.exe2⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
40KB
MD503ebc053c8eec6b4f4afbbb5dc64b169
SHA19ed172dbce1a6a1dd20e08a9720afba210eee79c
SHA256ad25714f5c7eb2e27742b5e0886e865fc8884e8b65cb863d2aeba0c6dbff2d02
SHA51240eab99574ea6614341b869239b014a74cdc24da0c4be69681eaab18de72bbef14ad4cf36215e39eff4978b8ed074762ce25bb85a042219ac5db5cb46390e9ff
-
Filesize
156KB
-
Filesize
84KB
-
Filesize
156KB
-
Filesize
156KB
-
Filesize
84KB