Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    183s
  • max time network
    85s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    03/12/2022, 18:13

General

  • Target

    84daa77bc0a59afa840cbd216fca62e1fe3f5f0a43e78edaa658d115d4d38af7.exe

  • Size

    908KB

  • MD5

    929dafc70c0d95476fe73d922565ba71

  • SHA1

    2b62765fd8fea59c5463753b8d564820d1a957d0

  • SHA256

    84daa77bc0a59afa840cbd216fca62e1fe3f5f0a43e78edaa658d115d4d38af7

  • SHA512

    26730b7636d19c01e31b580159f7d0e00b2999c2d04f8cfe6739486c1e79d2d2459110f2e7b5af55f785674a3f2d6c55b96cfb3be9677255acd4e7b86211e58c

  • SSDEEP

    12288:TYDWQYjBqCpE4ZgDO1MdPvsirCRoozle/kmzWdHasVXfuHslP9yYkv:TYiQYjBhwOGdPv6z/IumHB

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
  • Modifies Internet Explorer start page 1 TTPs 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\84daa77bc0a59afa840cbd216fca62e1fe3f5f0a43e78edaa658d115d4d38af7.exe
    "C:\Users\Admin\AppData\Local\Temp\84daa77bc0a59afa840cbd216fca62e1fe3f5f0a43e78edaa658d115d4d38af7.exe"
    1⤵
    • Modifies Internet Explorer settings
    • Modifies Internet Explorer start page
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    PID:680

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/680-54-0x00000000767D1000-0x00000000767D3000-memory.dmp

    Filesize

    8KB

  • memory/680-55-0x0000000000400000-0x00000000004F901D-memory.dmp

    Filesize

    996KB

  • memory/680-57-0x0000000000400000-0x00000000004F901D-memory.dmp

    Filesize

    996KB