Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    167s
  • max time network
    172s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06/11/2022, 23:13

General

  • Target

    fcbec87dd472a0b78079ec43feb136fc411dabcc1278ee5e3357b5ffeeb0f4e5.exe

  • Size

    828KB

  • MD5

    0460a8b3a1f28a2c75b1f871356b4260

  • SHA1

    540258e65d97ee9c85a47c87c430f6c007b7618e

  • SHA256

    fcbec87dd472a0b78079ec43feb136fc411dabcc1278ee5e3357b5ffeeb0f4e5

  • SHA512

    a04bcce862ac5f70d8f31d07fa3f30a45325da5065b542b6a1f7de36bab8269e4ecf1c8628a9b5a03519b21adae1a9d12f9ff1cfc7f2c834ca9d7d9f8c4ca408

  • SSDEEP

    12288:EDwnBsA2u7YCXgwP960bbud6qtpUR5nWFpPoSZsAJq9qq:ED9DbUgQ960bxqLnbHJFq

Score
8/10
upx

Malware Config

Signatures

  • UPX packed file 24 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\fcbec87dd472a0b78079ec43feb136fc411dabcc1278ee5e3357b5ffeeb0f4e5.exe
    "C:\Users\Admin\AppData\Local\Temp\fcbec87dd472a0b78079ec43feb136fc411dabcc1278ee5e3357b5ffeeb0f4e5.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:3668

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3668-132-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/3668-133-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/3668-134-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/3668-136-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/3668-138-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/3668-144-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/3668-142-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/3668-140-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/3668-148-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/3668-154-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/3668-152-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/3668-150-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/3668-146-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/3668-164-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/3668-166-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/3668-162-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/3668-160-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/3668-158-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/3668-156-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/3668-168-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/3668-170-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/3668-172-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/3668-174-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/3668-175-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB