Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    42s
  • max time network
    45s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    02/10/2022, 20:32

General

  • Target

    9c89ec02f1476749f8904f5202a2cfc46bf24e05fe52f018529e98f7da3c0b1b.exe

  • Size

    1.9MB

  • MD5

    845d9b43b7d2f4a73aad79155473d00c

  • SHA1

    737a47b7516a1c04df2a109fd9c0c441b97d3fa8

  • SHA256

    9c89ec02f1476749f8904f5202a2cfc46bf24e05fe52f018529e98f7da3c0b1b

  • SHA512

    7b3b813e2e590767298f0b5b75a3e28402e735c234bcc5d70f3933e4f0918fd04af952fb2f86369393a0af6454c011f59b932e2a4ac8b2b7d2f66fd8f9f0c467

  • SSDEEP

    24576:OuUHm/NQiI4L41f6GpPVLZ9KMYDZwf2FfWl8KuqGavkg3NyNIbbbIoIBAUZLYhzp:OuRN41fh9l9V+s8KuqGaX0ToIBAUZLYb

Score
8/10
upx

Malware Config

Signatures

  • UPX packed file 26 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\9c89ec02f1476749f8904f5202a2cfc46bf24e05fe52f018529e98f7da3c0b1b.exe
    "C:\Users\Admin\AppData\Local\Temp\9c89ec02f1476749f8904f5202a2cfc46bf24e05fe52f018529e98f7da3c0b1b.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1832

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1832-54-0x0000000076401000-0x0000000076403000-memory.dmp

    Filesize

    8KB

  • memory/1832-55-0x0000000010000000-0x000000001003D000-memory.dmp

    Filesize

    244KB

  • memory/1832-57-0x0000000010000000-0x000000001003D000-memory.dmp

    Filesize

    244KB

  • memory/1832-58-0x0000000010000000-0x000000001003D000-memory.dmp

    Filesize

    244KB

  • memory/1832-59-0x0000000010000000-0x000000001003D000-memory.dmp

    Filesize

    244KB

  • memory/1832-60-0x0000000010000000-0x000000001003D000-memory.dmp

    Filesize

    244KB

  • memory/1832-62-0x0000000010000000-0x000000001003D000-memory.dmp

    Filesize

    244KB

  • memory/1832-64-0x0000000010000000-0x000000001003D000-memory.dmp

    Filesize

    244KB

  • memory/1832-66-0x0000000010000000-0x000000001003D000-memory.dmp

    Filesize

    244KB

  • memory/1832-68-0x0000000010000000-0x000000001003D000-memory.dmp

    Filesize

    244KB

  • memory/1832-70-0x0000000010000000-0x000000001003D000-memory.dmp

    Filesize

    244KB

  • memory/1832-72-0x0000000010000000-0x000000001003D000-memory.dmp

    Filesize

    244KB

  • memory/1832-74-0x0000000010000000-0x000000001003D000-memory.dmp

    Filesize

    244KB

  • memory/1832-76-0x0000000010000000-0x000000001003D000-memory.dmp

    Filesize

    244KB

  • memory/1832-78-0x0000000010000000-0x000000001003D000-memory.dmp

    Filesize

    244KB

  • memory/1832-80-0x0000000010000000-0x000000001003D000-memory.dmp

    Filesize

    244KB

  • memory/1832-82-0x0000000010000000-0x000000001003D000-memory.dmp

    Filesize

    244KB

  • memory/1832-84-0x0000000010000000-0x000000001003D000-memory.dmp

    Filesize

    244KB

  • memory/1832-86-0x0000000010000000-0x000000001003D000-memory.dmp

    Filesize

    244KB

  • memory/1832-88-0x0000000010000000-0x000000001003D000-memory.dmp

    Filesize

    244KB

  • memory/1832-90-0x0000000010000000-0x000000001003D000-memory.dmp

    Filesize

    244KB

  • memory/1832-92-0x0000000010000000-0x000000001003D000-memory.dmp

    Filesize

    244KB

  • memory/1832-96-0x0000000010000000-0x000000001003D000-memory.dmp

    Filesize

    244KB

  • memory/1832-98-0x0000000010000000-0x000000001003D000-memory.dmp

    Filesize

    244KB

  • memory/1832-94-0x0000000010000000-0x000000001003D000-memory.dmp

    Filesize

    244KB

  • memory/1832-100-0x0000000010000000-0x000000001003D000-memory.dmp

    Filesize

    244KB

  • memory/1832-101-0x0000000010000000-0x000000001003D000-memory.dmp

    Filesize

    244KB