Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

1

Static

static

edf5e0f830...b5.exe

windows7-x64

1

edf5e0f830...b5.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    35s
  • max time network
    41s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    03/12/2022, 18:25

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    edf5e0f830b01adf41f1f0b4f6da3cfa9d274a8edd9bd845f087ae82ba1fb2b5.exe

  • Size

    168KB

  • MD5

    2a582392a8147d861cf703286a78c210

  • SHA1

    9695ff08baeab042787e6e3187c42988316d8ca1

  • SHA256

    edf5e0f830b01adf41f1f0b4f6da3cfa9d274a8edd9bd845f087ae82ba1fb2b5

  • SHA512

    9cf10bb951283f4f9195075f16b4c2f8169130fd67ed533b16f61f463a74998b1a922827be44d821e15032a3d65c2f94183dea8e7a2e97c39f28d31128936ddd

  • SSDEEP

    3072:NgOSFsI5DS75qlVKtlBAB/nRYBs7W3cKpjlJsMuxn6k7w0WYzd0k:dS9Zg59fBc/nRYe7W3cKp8pN6K3WYj

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\edf5e0f830b01adf41f1f0b4f6da3cfa9d274a8edd9bd845f087ae82ba1fb2b5.exe
    "C:\Users\Admin\AppData\Local\Temp\edf5e0f830b01adf41f1f0b4f6da3cfa9d274a8edd9bd845f087ae82ba1fb2b5.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:1592

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1592-54-0x0000000074FB1000-0x0000000074FB3000-memory.dmp

    Filesize

    8KB

    Download