Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    65s
  • max time network
    46s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    25/11/2022, 22:17

General

  • Target

    Keygen.exe

  • Size

    2.3MB

  • MD5

    04798a0dde80c2064f5466301e701fc2

  • SHA1

    fe4dc773c04d58eef623324bf503b3cf2afcc5e0

  • SHA256

    b66ce5aa238a4ce12fbc6315b1306b788d64ee57d7805e055ef3661bff847a0e

  • SHA512

    ff35340c5f32c882d8b6710e47c80cdcbc31f9d7caf3f466d848873b71bb437d17dedeedde2c90b67c9815d8947db15bdba39f591354583b77df8bbaab1be064

  • SSDEEP

    49152:8kTgiNPgVxquveP3eBzV43TGgnR4hEGSOYvyqOZVWHO1et1jEResgJB25t:8p4PgVxqRPZygngy/vdOaHO1MDsgJBSt

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 4 IoCs
  • Suspicious behavior: EnumeratesProcesses 17 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Keygen.exe
    "C:\Users\Admin\AppData\Local\Temp\Keygen.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    PID:1520

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\SkinSoft\VisualStyler\2.3.3.3\x86\ssapihook.dll

    Filesize

    57KB

    MD5

    d7f644c06b4cde60651d02aed6b4174d

    SHA1

    ae1c05821dcccb3280c7a9cbf4ce8d00d1eb680f

    SHA256

    a99ea2f5759b34859b484afa3a58ce82a7f3bf792886a6c838db852d517d9c0d

    SHA512

    db0b5dfb1b99fba61c8d9b883813747b37485fd5acc3091c5a5d5fcf0e3f2bd9b091a8bcb4f200a1fdeea00e2e62a9573b2d653bd6f8878ba321fefdfec2f384

  • \Users\Admin\AppData\Local\Temp\SkinSoft.VisualStyler.dll

    Filesize

    949KB

    MD5

    05c58268b4d54d419522124e6646c3db

    SHA1

    a96faaa33980ba9daa63aba282e75df6ef8d43b2

    SHA256

    a5ad9a34e1721a4086d2b6f1a1aa9da108a3fb6bb4e3ad5c26a495a5b7b41ba2

    SHA512

    382a2ebabbc0d77005749d310c2a10fde869b821e7196336532aa782c80c2c590d913d8021eb7e059dc695bc37e5670a7aa0843b9c1c4a75a390a958406cab65

  • \Users\Admin\AppData\Local\Temp\SkinSoft.VisualStyler.dll

    Filesize

    949KB

    MD5

    05c58268b4d54d419522124e6646c3db

    SHA1

    a96faaa33980ba9daa63aba282e75df6ef8d43b2

    SHA256

    a5ad9a34e1721a4086d2b6f1a1aa9da108a3fb6bb4e3ad5c26a495a5b7b41ba2

    SHA512

    382a2ebabbc0d77005749d310c2a10fde869b821e7196336532aa782c80c2c590d913d8021eb7e059dc695bc37e5670a7aa0843b9c1c4a75a390a958406cab65

  • \Users\Admin\AppData\Local\Temp\SkinSoft.VisualStyler.dll

    Filesize

    949KB

    MD5

    05c58268b4d54d419522124e6646c3db

    SHA1

    a96faaa33980ba9daa63aba282e75df6ef8d43b2

    SHA256

    a5ad9a34e1721a4086d2b6f1a1aa9da108a3fb6bb4e3ad5c26a495a5b7b41ba2

    SHA512

    382a2ebabbc0d77005749d310c2a10fde869b821e7196336532aa782c80c2c590d913d8021eb7e059dc695bc37e5670a7aa0843b9c1c4a75a390a958406cab65

  • memory/1520-54-0x0000000000CE0000-0x0000000000F06000-memory.dmp

    Filesize

    2.1MB

  • memory/1520-57-0x0000000075E11000-0x0000000075E13000-memory.dmp

    Filesize

    8KB

  • memory/1520-58-0x0000000074940000-0x0000000074EEB000-memory.dmp

    Filesize

    5.7MB

  • memory/1520-59-0x0000000000CE0000-0x0000000000F06000-memory.dmp

    Filesize

    2.1MB

  • memory/1520-61-0x0000000000CE0000-0x0000000000F06000-memory.dmp

    Filesize

    2.1MB

  • memory/1520-60-0x0000000000CE0000-0x0000000000F06000-memory.dmp

    Filesize

    2.1MB

  • memory/1520-63-0x0000000000CE0000-0x0000000000F06000-memory.dmp

    Filesize

    2.1MB

  • memory/1520-66-0x0000000000CE0000-0x0000000000F06000-memory.dmp

    Filesize

    2.1MB

  • memory/1520-64-0x0000000000CE0000-0x0000000000F06000-memory.dmp

    Filesize

    2.1MB

  • memory/1520-65-0x0000000000CE0000-0x0000000000F06000-memory.dmp

    Filesize

    2.1MB

  • memory/1520-62-0x0000000000CE0000-0x0000000000F06000-memory.dmp

    Filesize

    2.1MB

  • memory/1520-72-0x0000000000CE0000-0x0000000000F06000-memory.dmp

    Filesize

    2.1MB

  • memory/1520-71-0x0000000000CE0000-0x0000000000F06000-memory.dmp

    Filesize

    2.1MB

  • memory/1520-70-0x0000000000CE0000-0x0000000000F06000-memory.dmp

    Filesize

    2.1MB

  • memory/1520-89-0x0000000000CE0000-0x0000000000F06000-memory.dmp

    Filesize

    2.1MB

  • memory/1520-118-0x0000000000CE0000-0x0000000000F06000-memory.dmp

    Filesize

    2.1MB

  • memory/1520-117-0x0000000000CE0000-0x0000000000F06000-memory.dmp

    Filesize

    2.1MB

  • memory/1520-116-0x0000000000CE0000-0x0000000000F06000-memory.dmp

    Filesize

    2.1MB

  • memory/1520-115-0x0000000000CE0000-0x0000000000F06000-memory.dmp

    Filesize

    2.1MB

  • memory/1520-114-0x0000000000CE0000-0x0000000000F06000-memory.dmp

    Filesize

    2.1MB

  • memory/1520-113-0x0000000000CE0000-0x0000000000F06000-memory.dmp

    Filesize

    2.1MB

  • memory/1520-112-0x0000000000CE0000-0x0000000000F06000-memory.dmp

    Filesize

    2.1MB

  • memory/1520-111-0x0000000000CE0000-0x0000000000F06000-memory.dmp

    Filesize

    2.1MB

  • memory/1520-110-0x0000000000CE0000-0x0000000000F06000-memory.dmp

    Filesize

    2.1MB

  • memory/1520-109-0x0000000000CE0000-0x0000000000F06000-memory.dmp

    Filesize

    2.1MB

  • memory/1520-108-0x0000000000CE0000-0x0000000000F06000-memory.dmp

    Filesize

    2.1MB

  • memory/1520-107-0x0000000000CE0000-0x0000000000F06000-memory.dmp

    Filesize

    2.1MB

  • memory/1520-106-0x0000000000CE0000-0x0000000000F06000-memory.dmp

    Filesize

    2.1MB

  • memory/1520-105-0x0000000000CE0000-0x0000000000F06000-memory.dmp

    Filesize

    2.1MB

  • memory/1520-104-0x0000000000CE0000-0x0000000000F06000-memory.dmp

    Filesize

    2.1MB

  • memory/1520-103-0x0000000000CE0000-0x0000000000F06000-memory.dmp

    Filesize

    2.1MB

  • memory/1520-102-0x0000000000CE0000-0x0000000000F06000-memory.dmp

    Filesize

    2.1MB

  • memory/1520-101-0x0000000000CE0000-0x0000000000F06000-memory.dmp

    Filesize

    2.1MB

  • memory/1520-100-0x0000000000CE0000-0x0000000000F06000-memory.dmp

    Filesize

    2.1MB

  • memory/1520-99-0x0000000000CE0000-0x0000000000F06000-memory.dmp

    Filesize

    2.1MB

  • memory/1520-98-0x0000000000CE0000-0x0000000000F06000-memory.dmp

    Filesize

    2.1MB

  • memory/1520-97-0x0000000000CE0000-0x0000000000F06000-memory.dmp

    Filesize

    2.1MB

  • memory/1520-96-0x0000000000CE0000-0x0000000000F06000-memory.dmp

    Filesize

    2.1MB

  • memory/1520-95-0x0000000000CE0000-0x0000000000F06000-memory.dmp

    Filesize

    2.1MB

  • memory/1520-94-0x0000000000CE0000-0x0000000000F06000-memory.dmp

    Filesize

    2.1MB

  • memory/1520-93-0x0000000000CE0000-0x0000000000F06000-memory.dmp

    Filesize

    2.1MB

  • memory/1520-92-0x0000000000CE0000-0x0000000000F06000-memory.dmp

    Filesize

    2.1MB

  • memory/1520-91-0x0000000000CE0000-0x0000000000F06000-memory.dmp

    Filesize

    2.1MB

  • memory/1520-90-0x0000000000CE0000-0x0000000000F06000-memory.dmp

    Filesize

    2.1MB

  • memory/1520-88-0x0000000000CE0000-0x0000000000F06000-memory.dmp

    Filesize

    2.1MB

  • memory/1520-87-0x0000000000CE0000-0x0000000000F06000-memory.dmp

    Filesize

    2.1MB

  • memory/1520-86-0x0000000000CE0000-0x0000000000F06000-memory.dmp

    Filesize

    2.1MB

  • memory/1520-85-0x0000000000CE0000-0x0000000000F06000-memory.dmp

    Filesize

    2.1MB

  • memory/1520-84-0x0000000000CE0000-0x0000000000F06000-memory.dmp

    Filesize

    2.1MB

  • memory/1520-83-0x0000000000CE0000-0x0000000000F06000-memory.dmp

    Filesize

    2.1MB

  • memory/1520-82-0x0000000000CE0000-0x0000000000F06000-memory.dmp

    Filesize

    2.1MB

  • memory/1520-81-0x0000000000CE0000-0x0000000000F06000-memory.dmp

    Filesize

    2.1MB

  • memory/1520-80-0x0000000000CE0000-0x0000000000F06000-memory.dmp

    Filesize

    2.1MB

  • memory/1520-79-0x0000000000CE0000-0x0000000000F06000-memory.dmp

    Filesize

    2.1MB

  • memory/1520-78-0x0000000000CE0000-0x0000000000F06000-memory.dmp

    Filesize

    2.1MB

  • memory/1520-77-0x0000000000CE0000-0x0000000000F06000-memory.dmp

    Filesize

    2.1MB

  • memory/1520-76-0x0000000000CE0000-0x0000000000F06000-memory.dmp

    Filesize

    2.1MB

  • memory/1520-75-0x0000000000CE0000-0x0000000000F06000-memory.dmp

    Filesize

    2.1MB

  • memory/1520-74-0x0000000000CE0000-0x0000000000F06000-memory.dmp

    Filesize

    2.1MB

  • memory/1520-73-0x0000000000CE0000-0x0000000000F06000-memory.dmp

    Filesize

    2.1MB

  • memory/1520-69-0x0000000000CE0000-0x0000000000F06000-memory.dmp

    Filesize

    2.1MB

  • memory/1520-68-0x0000000000CE0000-0x0000000000F06000-memory.dmp

    Filesize

    2.1MB

  • memory/1520-67-0x0000000000CE0000-0x0000000000F06000-memory.dmp

    Filesize

    2.1MB

  • memory/1520-203-0x0000000002786000-0x0000000002797000-memory.dmp

    Filesize

    68KB

  • memory/1520-208-0x0000000074940000-0x0000000074EEB000-memory.dmp

    Filesize

    5.7MB

  • memory/1520-209-0x0000000002786000-0x0000000002797000-memory.dmp

    Filesize

    68KB