Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    43s
  • max time network
    46s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    22/11/2022, 11:05

General

  • Target

    70000d153471c7c8557d958f1a53e6a1f0a9aeec973225f9f53b5f3182a2053f.exe

  • Size

    1.3MB

  • MD5

    50d91c27e9a8fcec71fd324db23a4508

  • SHA1

    462edd1034c99dc223f5915d9d9b0871c3e4263e

  • SHA256

    70000d153471c7c8557d958f1a53e6a1f0a9aeec973225f9f53b5f3182a2053f

  • SHA512

    1686802fb9283113b1609e5292c8f847b28a88aeb46a661861387ade96cb7aae0c5e797106cc319338505b9ab98fb5ec01df6764dda4de2c940abc583f2458f5

  • SSDEEP

    24576:7rKqlGCPcJKwybUDwEZZODYmR9G+gnbkk6XRJfe3DqYO/KpLwFfngWX4VmJPakY:7rKo4ZwCOnYjVmJPa/

Score
5/10

Malware Config

Signatures

  • Suspicious use of SetThreadContext 1 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
  • Suspicious use of SetWindowsHookEx 5 IoCs
  • Suspicious use of WriteProcessMemory 11 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\70000d153471c7c8557d958f1a53e6a1f0a9aeec973225f9f53b5f3182a2053f.exe
    "C:\Users\Admin\AppData\Local\Temp\70000d153471c7c8557d958f1a53e6a1f0a9aeec973225f9f53b5f3182a2053f.exe"
    1⤵
    • Suspicious use of SetThreadContext
    • Suspicious use of WriteProcessMemory
    PID:1896
    • C:\Users\Admin\AppData\Local\Temp\70000d153471c7c8557d958f1a53e6a1f0a9aeec973225f9f53b5f3182a2053f.exe
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2044

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2044-54-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB

  • memory/2044-55-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB

  • memory/2044-57-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB

  • memory/2044-59-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB

  • memory/2044-61-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB

  • memory/2044-63-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB

  • memory/2044-65-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB

  • memory/2044-68-0x0000000075201000-0x0000000075203000-memory.dmp

    Filesize

    8KB

  • memory/2044-69-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB

  • memory/2044-70-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB

  • memory/2044-72-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB