Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    34s
  • max time network
    43s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    26/11/2022, 00:33

General

  • Target

    a418e84d40a106d6c5be19d1f5650dee11694767376cf4209c568e01d58f3753.exe

  • Size

    1.3MB

  • MD5

    f981d34875e739ab78d3d22d67154e2d

  • SHA1

    fcd1b39bb4645f4b267322a1d823da1064f31eb7

  • SHA256

    a418e84d40a106d6c5be19d1f5650dee11694767376cf4209c568e01d58f3753

  • SHA512

    46604591d7043def01782c951ab99e79e347645a08fb8c15c44d2da0645b3154bd419200d8616dfea74fb565fa4f68b4cf70e281a44f0c976e788f769d69cfb7

  • SSDEEP

    24576:VpyhP5RFFrSEyFPu8JR9ksaQFCLwbLflBP3:yyFPu8D9k5QELuLv

Score
5/10

Malware Config

Signatures

  • Suspicious use of SetThreadContext 1 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
  • Suspicious use of SetWindowsHookEx 5 IoCs
  • Suspicious use of WriteProcessMemory 11 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\a418e84d40a106d6c5be19d1f5650dee11694767376cf4209c568e01d58f3753.exe
    "C:\Users\Admin\AppData\Local\Temp\a418e84d40a106d6c5be19d1f5650dee11694767376cf4209c568e01d58f3753.exe"
    1⤵
    • Suspicious use of SetThreadContext
    • Suspicious use of WriteProcessMemory
    PID:2000
    • C:\Users\Admin\AppData\Local\Temp\a418e84d40a106d6c5be19d1f5650dee11694767376cf4209c568e01d58f3753.exe
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1968

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1968-54-0x0000000000400000-0x00000000004D8000-memory.dmp

    Filesize

    864KB

  • memory/1968-55-0x0000000000400000-0x00000000004D8000-memory.dmp

    Filesize

    864KB

  • memory/1968-57-0x0000000000400000-0x00000000004D8000-memory.dmp

    Filesize

    864KB

  • memory/1968-59-0x0000000000400000-0x00000000004D8000-memory.dmp

    Filesize

    864KB

  • memory/1968-61-0x0000000000400000-0x00000000004D8000-memory.dmp

    Filesize

    864KB

  • memory/1968-63-0x0000000000400000-0x00000000004D8000-memory.dmp

    Filesize

    864KB

  • memory/1968-65-0x0000000000400000-0x00000000004D8000-memory.dmp

    Filesize

    864KB

  • memory/1968-68-0x00000000754E1000-0x00000000754E3000-memory.dmp

    Filesize

    8KB

  • memory/1968-69-0x0000000000400000-0x00000000004D8000-memory.dmp

    Filesize

    864KB

  • memory/1968-70-0x0000000000400000-0x00000000004D8000-memory.dmp

    Filesize

    864KB

  • memory/1968-72-0x0000000000400000-0x00000000004D8000-memory.dmp

    Filesize

    864KB