Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

4

Static

static

37bd2967c2...94.exe

windows7-x64

4

37bd2967c2...94.exe

windows10-2004-x64

4

Analysis

  • max time kernel
    94s
  • max time network
    128s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/10/2022, 19:15

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    37bd2967c2a670003ede6a82f4625ed459f66e87884dde91c12dc3f023755994.exe

  • Size

    84KB

  • MD5

    013c2b3816091e9bdbd6e78c8cef808f

  • SHA1

    7bc2cec79cd18f7f5d7c6753627b4f21e8dc7216

  • SHA256

    37bd2967c2a670003ede6a82f4625ed459f66e87884dde91c12dc3f023755994

  • SHA512

    048d2e0f3286c2e99d1dad1140f735cc02929a7e51365006d44b00c224e4533074085e633013e620b433e3b2c18c1f12da32aac2d211f728f39aa3b29bf02222

  • SSDEEP

    1536:qwm8nBjqs32bxPpBRy32Z6gJlyiKqVo6EUb:5m8nBjTmbxRBRN6WYiKqVo6Zb

Score
4/10

Malware Config

Signatures

  • Drops file in Windows directory 4 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Windows\Explorer.EXE
    C:\Windows\Explorer.EXE
    1⤵
      PID:2736
      • C:\Users\Admin\AppData\Local\Temp\37bd2967c2a670003ede6a82f4625ed459f66e87884dde91c12dc3f023755994.exe
        "C:\Users\Admin\AppData\Local\Temp\37bd2967c2a670003ede6a82f4625ed459f66e87884dde91c12dc3f023755994.exe"
        2⤵
        • Drops file in Windows directory
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of WriteProcessMemory
        PID:4692

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads