Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

1

Static

static

【软件�...12.exe

windows7-x64

1

【软件�...12.exe

windows10-2004-x64

1

样本号码.xlsx

windows7-x64

1

样本号码.xlsx

windows10-2004-x64

1

Analysis

  • max time kernel
    41s
  • max time network
    54s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    07/11/2022, 09:28

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    【软件】批量号码导入手机通讯录软件-T12.exe

  • Size

    251KB

  • MD5

    5b04d91672718ce825a41b667d8e0fde

  • SHA1

    6e5165a104273de8cbf1b6466eb2a15c23936a3e

  • SHA256

    114e453077d58fec75d741ecc40ad892342b03604a963b260ed3bc41c7837249

  • SHA512

    2f95951c2bf3dff1108b198a6ab7d59ec57db4f0e6a1c874720a187d36a5a7f46f8205396cf6c172d0488a9204d63dea419f6cfc69ee9a34d802ee0062c548db

  • SSDEEP

    6144:ZX6Gwkkkkkkkkkkkkkkkkkkko21u1kqkqkqkwEd:lRwiuK7771d

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\【软件】批量号码导入手机通讯录软件-T12.exe
    "C:\Users\Admin\AppData\Local\Temp\【软件】批量号码导入手机通讯录软件-T12.exe"
    1⤵
      PID:1672

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1672-54-0x0000000000880000-0x00000000008C6000-memory.dmp

      Filesize

      280KB

      Download

    • memory/1672-55-0x000007FEFB8B1000-0x000007FEFB8B3000-memory.dmp

      Filesize

      8KB

      Download

    • memory/1672-56-0x0000000001F26000-0x0000000001F45000-memory.dmp

      Filesize

      124KB

      Download