Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

304440b8b1...6c.exe

windows7-x64

7

304440b8b1...6c.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    45s
  • max time network
    44s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    29/10/2022, 05:13

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    304440b8b12b40d1a5aee0c89c34ba6a9bc0be6b5e57a2fea0dd3fcd2e59fc6c.exe

  • Size

    1.8MB

  • MD5

    171b5e27d3a632a4fd2a0cae6a22bb40

  • SHA1

    f1f0f10cc356ad257491cd8760d82da4ded45e1e

  • SHA256

    304440b8b12b40d1a5aee0c89c34ba6a9bc0be6b5e57a2fea0dd3fcd2e59fc6c

  • SHA512

    12f0e7cf9ce1b5e2c647a3e4a7a8b9d35e385080430f186fe8fd4ae93c9b1d89d441ef47a20f4cd3259f391f8ae293289311854b43f211e1a18620c4c47cc403

  • SSDEEP

    49152:Ib+u9lgqaacOW2T/HAKoOjc3bdi4HhP4tcYyBr:Ib6qa12TIa0Zi4BgtGBr

Score
7/10

Malware Config

Signatures

  • Checks BIOS information in registry 2 TTPs 1 IoCs

    BIOS information is often read in order to detect sandboxing environments.

  • Suspicious use of NtSetInformationThreadHideFromDebugger 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\304440b8b12b40d1a5aee0c89c34ba6a9bc0be6b5e57a2fea0dd3fcd2e59fc6c.exe
    "C:\Users\Admin\AppData\Local\Temp\304440b8b12b40d1a5aee0c89c34ba6a9bc0be6b5e57a2fea0dd3fcd2e59fc6c.exe"
    1⤵
    • Checks BIOS information in registry
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    PID:1348

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1348-54-0x0000000000400000-0x00000000006E4000-memory.dmp

    Filesize

    2.9MB

    Download

  • memory/1348-55-0x00000000750A1000-0x00000000750A3000-memory.dmp

    Filesize

    8KB

    Download

  • memory/1348-57-0x00000000766E0000-0x0000000076727000-memory.dmp

    Filesize

    284KB

    Download

  • memory/1348-465-0x0000000002730000-0x0000000002841000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1348-464-0x0000000002730000-0x0000000002841000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1348-467-0x0000000002730000-0x0000000002841000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1348-468-0x0000000002730000-0x0000000002841000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1348-466-0x0000000002730000-0x0000000002841000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1348-469-0x0000000002730000-0x0000000002841000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1348-471-0x0000000002730000-0x0000000002841000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1348-470-0x0000000002730000-0x0000000002841000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1348-473-0x0000000002730000-0x0000000002841000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1348-472-0x0000000002730000-0x0000000002841000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1348-475-0x0000000002730000-0x0000000002841000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1348-474-0x0000000002730000-0x0000000002841000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1348-482-0x0000000002730000-0x0000000002841000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1348-481-0x0000000002730000-0x0000000002841000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1348-480-0x0000000002730000-0x0000000002841000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1348-479-0x0000000002730000-0x0000000002841000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1348-478-0x0000000002730000-0x0000000002841000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1348-477-0x0000000002730000-0x0000000002841000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1348-483-0x0000000002730000-0x0000000002841000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1348-525-0x0000000002730000-0x0000000002841000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1348-524-0x0000000002730000-0x0000000002841000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1348-523-0x0000000002730000-0x0000000002841000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1348-522-0x0000000002730000-0x0000000002841000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1348-521-0x0000000002730000-0x0000000002841000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1348-520-0x0000000002730000-0x0000000002841000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1348-519-0x0000000002730000-0x0000000002841000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1348-518-0x0000000002730000-0x0000000002841000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1348-517-0x0000000002730000-0x0000000002841000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1348-516-0x0000000002730000-0x0000000002841000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1348-515-0x0000000002730000-0x0000000002841000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1348-514-0x0000000002730000-0x0000000002841000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1348-513-0x0000000002730000-0x0000000002841000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1348-512-0x0000000002730000-0x0000000002841000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1348-511-0x0000000002730000-0x0000000002841000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1348-510-0x0000000002730000-0x0000000002841000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1348-509-0x0000000002730000-0x0000000002841000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1348-508-0x0000000002730000-0x0000000002841000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1348-507-0x0000000002730000-0x0000000002841000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1348-506-0x0000000002730000-0x0000000002841000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1348-505-0x0000000002730000-0x0000000002841000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1348-504-0x0000000002730000-0x0000000002841000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1348-503-0x0000000002730000-0x0000000002841000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1348-502-0x0000000002730000-0x0000000002841000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1348-501-0x0000000002730000-0x0000000002841000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1348-500-0x0000000002730000-0x0000000002841000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1348-499-0x0000000002730000-0x0000000002841000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1348-498-0x0000000002730000-0x0000000002841000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1348-497-0x0000000002730000-0x0000000002841000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1348-496-0x0000000002730000-0x0000000002841000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1348-495-0x0000000002730000-0x0000000002841000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1348-494-0x0000000002730000-0x0000000002841000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1348-493-0x0000000002730000-0x0000000002841000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1348-492-0x0000000002730000-0x0000000002841000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1348-491-0x0000000002730000-0x0000000002841000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1348-490-0x0000000002730000-0x0000000002841000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1348-489-0x0000000002730000-0x0000000002841000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1348-488-0x0000000002730000-0x0000000002841000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1348-487-0x0000000002730000-0x0000000002841000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1348-486-0x0000000002730000-0x0000000002841000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1348-485-0x0000000002730000-0x0000000002841000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1348-484-0x0000000002730000-0x0000000002841000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1348-476-0x0000000002730000-0x0000000002841000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1348-1559-0x0000000002480000-0x0000000002601000-memory.dmp

    Filesize

    1.5MB

    Download

  • memory/1348-1557-0x0000000002260000-0x0000000002360000-memory.dmp

    Filesize

    1024KB

    Download

  • memory/1348-4699-0x0000000002730000-0x0000000002841000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1348-4700-0x0000000002441000-0x000000000245E000-memory.dmp

    Filesize

    116KB

    Download

  • memory/1348-4701-0x0000000002610000-0x0000000002711000-memory.dmp

    Filesize

    1.0MB

    Download

  • memory/1348-4702-0x0000000002060000-0x0000000002101000-memory.dmp

    Filesize

    644KB

    Download

  • memory/1348-4703-0x0000000002260000-0x0000000002360000-memory.dmp

    Filesize

    1024KB

    Download

  • memory/1348-4704-0x0000000000400000-0x00000000006E4000-memory.dmp

    Filesize

    2.9MB

    Download