Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
46s -
max time network
50s -
platform
windows7_x64 -
resource
win7-20220901-en -
resource tags
arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system -
submitted
02/12/2022, 18:04
Static task
static1
Behavioral task
behavioral1
Sample
8b174bbb78e6449d1deaa88dcb4d24cfb7091ce61e6b39106d396cf954b0e181.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
8b174bbb78e6449d1deaa88dcb4d24cfb7091ce61e6b39106d396cf954b0e181.exe
Resource
win10v2004-20220812-en
General
-
Target
8b174bbb78e6449d1deaa88dcb4d24cfb7091ce61e6b39106d396cf954b0e181.exe
-
Size
32KB
-
MD5
767e8c891e85227ec6c93610ebcf6147
-
SHA1
5c379ad1ddee782b1f135f559a90a5b8202e8f45
-
SHA256
8b174bbb78e6449d1deaa88dcb4d24cfb7091ce61e6b39106d396cf954b0e181
-
SHA512
980d97baac54d0de66f96f042eb7140d9cd2af38be5ccd33d4f4111fb72a584a23eb8261a932a4790e7f802ca6d9069a2d2e29bf02e4d79af218d9c98d25daf0
-
SSDEEP
768:QkcdrDnRXYSOJyn3k2bcGAnace6XYmcZIM:JcdPp0naxmcZ
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 608 8b174bbb78e6449d1deaa88dcb4d24cfb7091ce61e6b39106d396cf954b0e181.exe -
Drops file in System32 directory 1 IoCs
description ioc Process File created C:\Windows\SysWOW64\UKHook.dll 8b174bbb78e6449d1deaa88dcb4d24cfb7091ce61e6b39106d396cf954b0e181.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 608 8b174bbb78e6449d1deaa88dcb4d24cfb7091ce61e6b39106d396cf954b0e181.exe 608 8b174bbb78e6449d1deaa88dcb4d24cfb7091ce61e6b39106d396cf954b0e181.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\8b174bbb78e6449d1deaa88dcb4d24cfb7091ce61e6b39106d396cf954b0e181.exe"C:\Users\Admin\AppData\Local\Temp\8b174bbb78e6449d1deaa88dcb4d24cfb7091ce61e6b39106d396cf954b0e181.exe"1⤵
- Loads dropped DLL
- Drops file in System32 directory
- Suspicious use of SetWindowsHookEx
PID:608
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
24KB
MD581a209ec6fb2b3eb94d6c3ed3224c99d
SHA1929b06984471055ba630672fce9734549a910621
SHA2569275426bf663912368b6b658aa2f0c6ae3d7357fa5d97c9e42cc97493492391e
SHA512f13a0894cefd5db23db84d816007e0dcce6a3624f04a38ac9dd15ff7d643f07539fbf59e4ca8800c8a193818b6d8ca8e0c84e765edfee67de71ee7f485673b6f