Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    90s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25/11/2022, 19:50

General

  • Target

    78edde85457820d7eb169e326b9d5e1a8cff7846f0dc1c91a0ea68f5150e21d3.exe

  • Size

    1024KB

  • MD5

    26728565d42d1f2e3b8d605fddf67f06

  • SHA1

    2e3fc8de1516e2417e4a0a88bd4ea9b768861220

  • SHA256

    78edde85457820d7eb169e326b9d5e1a8cff7846f0dc1c91a0ea68f5150e21d3

  • SHA512

    76d1b29abdf529204a7336ee1236b276897dcc920aa70183447b9cd1fcc52e08b8b32935f396700489e5285efd1a43867f07e4a5ed7305d306e56718c02773b2

  • SSDEEP

    12288:tUOzqZGV2BDbcxaLM/P2YkND8rTEocr858KwWMyOfztTf+p+WuR5nWFpPoS9YQ6t:8RbcxaLM/cNdoDOIHO5b+gKbzYByTVe

Score
8/10
upx

Malware Config

Signatures

  • UPX packed file 26 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of SetWindowsHookEx 5 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\78edde85457820d7eb169e326b9d5e1a8cff7846f0dc1c91a0ea68f5150e21d3.exe
    "C:\Users\Admin\AppData\Local\Temp\78edde85457820d7eb169e326b9d5e1a8cff7846f0dc1c91a0ea68f5150e21d3.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2200

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2200-132-0x0000000000400000-0x0000000000510000-memory.dmp

    Filesize

    1.1MB

  • memory/2200-133-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2200-136-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2200-135-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2200-137-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2200-138-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2200-140-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2200-142-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2200-144-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2200-146-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2200-148-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2200-150-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2200-152-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2200-154-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2200-156-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2200-158-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2200-160-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2200-168-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2200-170-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2200-174-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2200-178-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2200-176-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2200-172-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2200-166-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2200-164-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2200-162-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2200-179-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2200-180-0x0000000000400000-0x0000000000510000-memory.dmp

    Filesize

    1.1MB