Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    148s
  • max time network
    162s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    22/11/2022, 11:07

General

  • Target

    6f626e15c110cc6bec68426ba58fa686126ae67dcfe5cdf1b261f0924b0fc212.exe

  • Size

    1.3MB

  • MD5

    6ce42267a4a4046685ca9de9c72471a8

  • SHA1

    8aba53d038066ddadd49f74d9c04cd1376129a31

  • SHA256

    6f626e15c110cc6bec68426ba58fa686126ae67dcfe5cdf1b261f0924b0fc212

  • SHA512

    853c5b75946a9ac78c1b4ea5667454e77d96df232dfbb40e905fa905b5b7d14a693e0dfd8bf7a84a668c72562207eaf5d336aa83c89cf71411c9216bec343a20

  • SSDEEP

    24576:7rKqlGCPcJKwybUDwEZZODYmR9G+gnbkk6XRJfe3DqYO/KpLwFfngWX4VmJPak1D:7rKo4ZwCOnYjVmJPagD

Score
5/10

Malware Config

Signatures

  • Suspicious use of SetThreadContext 1 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
  • Suspicious use of SetWindowsHookEx 5 IoCs
  • Suspicious use of WriteProcessMemory 11 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\6f626e15c110cc6bec68426ba58fa686126ae67dcfe5cdf1b261f0924b0fc212.exe
    "C:\Users\Admin\AppData\Local\Temp\6f626e15c110cc6bec68426ba58fa686126ae67dcfe5cdf1b261f0924b0fc212.exe"
    1⤵
    • Suspicious use of SetThreadContext
    • Suspicious use of WriteProcessMemory
    PID:956
    • C:\Users\Admin\AppData\Local\Temp\6f626e15c110cc6bec68426ba58fa686126ae67dcfe5cdf1b261f0924b0fc212.exe
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1368

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1368-54-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB

  • memory/1368-55-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB

  • memory/1368-57-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB

  • memory/1368-59-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB

  • memory/1368-61-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB

  • memory/1368-63-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB

  • memory/1368-65-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB

  • memory/1368-68-0x00000000757C1000-0x00000000757C3000-memory.dmp

    Filesize

    8KB

  • memory/1368-69-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB

  • memory/1368-70-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB

  • memory/1368-71-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB

  • memory/1368-73-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB