Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

4476d2351a...be.exe

windows7-x64

9

4476d2351a...be.exe

windows10-2004-x64

9

Analysis

  • max time kernel
    166s
  • max time network
    177s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/11/2022, 07:32

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    4476d2351a0cf396c4ad342e9f9ca29e840c6db0e4e0199f1215123152032dbe.exe

  • Size

    212KB

  • MD5

    010e2b475e08a8c0a39c4c10dbb843fc

  • SHA1

    a249eb30e35bebb30b450f9e8af51955257289c4

  • SHA256

    4476d2351a0cf396c4ad342e9f9ca29e840c6db0e4e0199f1215123152032dbe

  • SHA512

    5753df482ef143f2fce048f191c0b73b9a4f3ff42301f5f28c1ab214caafc540db67be8589cfe78c766c9997085d71dc356ff6e00d70f45427bd2667c1773260

  • SSDEEP

    6144:dy2l2i/H4hcq807ZgNgtyC8ayHfKid5aGr:d92OH0k07qUyCKyG5

Score
9/10

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 2 IoCs

    Detects file using ACProtect software.

  • Loads dropped DLL 2 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\4476d2351a0cf396c4ad342e9f9ca29e840c6db0e4e0199f1215123152032dbe.exe
    "C:\Users\Admin\AppData\Local\Temp\4476d2351a0cf396c4ad342e9f9ca29e840c6db0e4e0199f1215123152032dbe.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of SetWindowsHookEx
    PID:1568

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\btiC20C.tmp
    Filesize

    172KB

    MD5

    4f407b29d53e9eb54e22d096fce82aa7

    SHA1

    a4ee25b066cac19ff679dd491f5791652bb71185

    SHA256

    cf0ecf30fc95800a34105acb9bcb484bb594a35b3ef26ace8f122af4f9f888dc

    SHA512

    325f7b599455195101e4c0dafd3654906d20ed2c1ce2a5f38784635e16ab545df6ee44a83bed6128239be2dee5be110552c7b246b7f52482ab31552e14b54183

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\btiC20C.tmp
    Filesize

    172KB

    MD5

    4f407b29d53e9eb54e22d096fce82aa7

    SHA1

    a4ee25b066cac19ff679dd491f5791652bb71185

    SHA256

    cf0ecf30fc95800a34105acb9bcb484bb594a35b3ef26ace8f122af4f9f888dc

    SHA512

    325f7b599455195101e4c0dafd3654906d20ed2c1ce2a5f38784635e16ab545df6ee44a83bed6128239be2dee5be110552c7b246b7f52482ab31552e14b54183

    Download Submit

  • memory/1568-132-0x0000000030000000-0x0000000030024000-memory.dmp

    Filesize

    144KB

    Download

  • memory/1568-135-0x0000000030000000-0x0000000030024000-memory.dmp

    Filesize

    144KB

    Download

  • memory/1568-136-0x00000000004B0000-0x0000000000524000-memory.dmp

    Filesize

    464KB

    Download