Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    90s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26/11/2022, 00:13

General

  • Target

    451661f2d060bea4c35b75163104474c64c456c40cc84578f0a4e75a549d755c.exe

  • Size

    76KB

  • MD5

    32443a00beaff1548bb3e23c5c89bd6a

  • SHA1

    a85e32c0236f73d480aaec0d8dd74b9f4b3b3e63

  • SHA256

    451661f2d060bea4c35b75163104474c64c456c40cc84578f0a4e75a549d755c

  • SHA512

    7861fe9c89480bcd1607549227e564a6c5ca454e94597a4ea6c8d9a8324a66c5ffa82058d801899456bd45c3043ff5379f69d1d95135604d023e1107aa7ba077

  • SSDEEP

    1536:4tzokBG3lUtdaEl45ufG3B/Pm8L2WcXIIa0VHOt1:4OA1vz2YG3xWPXLaC+

Score
8/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\451661f2d060bea4c35b75163104474c64c456c40cc84578f0a4e75a549d755c.exe
    "C:\Users\Admin\AppData\Local\Temp\451661f2d060bea4c35b75163104474c64c456c40cc84578f0a4e75a549d755c.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1028

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1028-132-0x0000000000400000-0x0000000000437000-memory.dmp

    Filesize

    220KB

  • memory/1028-135-0x0000000000400000-0x0000000000437000-memory.dmp

    Filesize

    220KB