Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    38s
  • max time network
    41s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    22/11/2022, 13:54

General

  • Target

    3fc34eace5554c17dad479a1cd81904019c60216d96210eb37cb9570ed314891.exe

  • Size

    1.3MB

  • MD5

    5f65f0f298fd93a19d2084bcc9f54597

  • SHA1

    838b8b853e57811c226b286c59a9611111a9ac92

  • SHA256

    3fc34eace5554c17dad479a1cd81904019c60216d96210eb37cb9570ed314891

  • SHA512

    76a15115ee6ae55289b06d2005e66b4d3f2aa88a3784d22d2eeddf30aa04704ee2d9a9c141e9daf216442994021ad6377280a3317944a09275300440c29e6fce

  • SSDEEP

    24576:TrKqlGCPcJKwybUDwEZZODYmR9G+gnbkk6XRJfe3DqYO/KpLwFfngWX4VmJPakq:TrKo4ZwCOnYjVmJPah

Score
5/10

Malware Config

Signatures

  • Suspicious use of SetThreadContext 1 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
  • Suspicious use of SetWindowsHookEx 5 IoCs
  • Suspicious use of WriteProcessMemory 11 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3fc34eace5554c17dad479a1cd81904019c60216d96210eb37cb9570ed314891.exe
    "C:\Users\Admin\AppData\Local\Temp\3fc34eace5554c17dad479a1cd81904019c60216d96210eb37cb9570ed314891.exe"
    1⤵
    • Suspicious use of SetThreadContext
    • Suspicious use of WriteProcessMemory
    PID:1928
    • C:\Users\Admin\AppData\Local\Temp\3fc34eace5554c17dad479a1cd81904019c60216d96210eb37cb9570ed314891.exe
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1704

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1704-54-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB

  • memory/1704-55-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB

  • memory/1704-57-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB

  • memory/1704-59-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB

  • memory/1704-61-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB

  • memory/1704-63-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB

  • memory/1704-65-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB

  • memory/1704-68-0x00000000762B1000-0x00000000762B3000-memory.dmp

    Filesize

    8KB

  • memory/1704-69-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB

  • memory/1704-70-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB

  • memory/1704-71-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB

  • memory/1704-72-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB