Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

85bda9fc3d...cd.exe

windows7-x64

7

85bda9fc3d...cd.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    42s
  • max time network
    49s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    01/12/2022, 19:06

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    85bda9fc3da898c307b86a2179499d3c2705d81ed0b7853cae61f9974d823ccd.exe

  • Size

    5.3MB

  • MD5

    7a7ab6afb202eb74a636e13fcfae3a7e

  • SHA1

    10beae8eda25038d639d08f330641e66972e9606

  • SHA256

    85bda9fc3da898c307b86a2179499d3c2705d81ed0b7853cae61f9974d823ccd

  • SHA512

    9c1b0c131c03cec342ded32139f0c907416ff0a96588f59fa32e53d8b2e44cadde3d65e8a4b6d8abefefd9361c7c6b2720efe7b44f0ebcb07f7491de53833302

  • SSDEEP

    98304:ODU+6lqxONesqOYNVZpis6uiplOKvkQgZa/TM9:DqsNesOQs6g0gZa

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\85bda9fc3da898c307b86a2179499d3c2705d81ed0b7853cae61f9974d823ccd.exe
    "C:\Users\Admin\AppData\Local\Temp\85bda9fc3da898c307b86a2179499d3c2705d81ed0b7853cae61f9974d823ccd.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of SetWindowsHookEx
    PID:2016

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\6c39a7.tmp
    Filesize

    333KB

    MD5

    56a2bcecbd3cddd6f4a35361bf4920d6

    SHA1

    992e63be423f0e61093ba183f49fc0cbec790488

    SHA256

    5fcfac18758a12e0e717a5189f379922a32b5ac12f26491e638d70b54ae1dcab

    SHA512

    473cbdf760242db1f0f1d0c27046c0564998f2bf931ad03feb28af3c7bd253d00e6f0836dadf37f29e0db4171eb64e6a15ed4cb9a9d28b48fb0aab601573f551

    Download Submit

  • memory/2016-54-0x0000000075A71000-0x0000000075A73000-memory.dmp

    Filesize

    8KB

    Download

  • memory/2016-55-0x0000000010000000-0x0000000010116000-memory.dmp

    Filesize

    1.1MB

    Download