Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    91s
  • max time network
    157s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28/11/2022, 05:17

General

  • Target

    7736a32dbc3dd614f8b7a67e914a9787d80674b015257d92484c295a41f4cc0c.exe

  • Size

    973KB

  • MD5

    aefa37d263bec59cb51da0cdce36b5e1

  • SHA1

    48757797c2041a9d935fafbf4351183015573b05

  • SHA256

    7736a32dbc3dd614f8b7a67e914a9787d80674b015257d92484c295a41f4cc0c

  • SHA512

    6beaae87e47633abd8857c20f6d0ebd46a78809fabd0511aac3a6ef08cfa51ea0a7ebd0402de95862ef734e0c34ee8455903ad78193afedc5504d90b44a9c53f

  • SSDEEP

    24576:K+wU+0GRJBMyaosJdRnPUKGh6qltQpoRGbkZMA0uSrrx7wH5:IR0GRJ5RsBPUKGhtQugkZOja5

Score
7/10

Malware Config

Signatures

  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\7736a32dbc3dd614f8b7a67e914a9787d80674b015257d92484c295a41f4cc0c.exe
    "C:\Users\Admin\AppData\Local\Temp\7736a32dbc3dd614f8b7a67e914a9787d80674b015257d92484c295a41f4cc0c.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:3488

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads