Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

5

Static

static

fd1e6878b0...cd.exe

windows7-x64

5

fd1e6878b0...cd.exe

windows10-2004-x64

5

Analysis

  • max time kernel
    149s
  • max time network
    149s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    06/12/2022, 13:19

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    fd1e6878b0a3b99c2de4c7d50f0ce3b70956a625dab2f962b399d8ac06a850cd.exe

  • Size

    1.6MB

  • MD5

    7df90a607dba58822e2df864063c6f8e

  • SHA1

    824c4e4a554f84cdf0d1d489705c46b85b4d8d3e

  • SHA256

    fd1e6878b0a3b99c2de4c7d50f0ce3b70956a625dab2f962b399d8ac06a850cd

  • SHA512

    8cb3688bf00676e91175390396d8108787bd0a405745e6e9afb693c94d679edb767ae63917b2f57def8745740e36086efefa639f90a4d739081d42efc0670e97

  • SSDEEP

    49152:eO9E2gDpp6oIGZt80+s6yODFxFoarvY7GGwJBzcEI2:IjDpp6mDUxyarewFI2

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\fd1e6878b0a3b99c2de4c7d50f0ce3b70956a625dab2f962b399d8ac06a850cd.exe
    "C:\Users\Admin\AppData\Local\Temp\fd1e6878b0a3b99c2de4c7d50f0ce3b70956a625dab2f962b399d8ac06a850cd.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    PID:1328

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1328-54-0x0000000075FE1000-0x0000000075FE3000-memory.dmp

    Filesize

    8KB

    Download

  • memory/1328-55-0x0000000000400000-0x000000000061A000-memory.dmp

    Filesize

    2.1MB

    Download

  • memory/1328-57-0x00000000755C0000-0x0000000075607000-memory.dmp

    Filesize

    284KB

    Download

  • memory/1328-466-0x0000000002490000-0x00000000025A1000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1328-465-0x0000000002490000-0x00000000025A1000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1328-464-0x0000000002490000-0x00000000025A1000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1328-463-0x0000000002490000-0x00000000025A1000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1328-467-0x0000000002490000-0x00000000025A1000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1328-470-0x0000000002490000-0x00000000025A1000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1328-469-0x0000000002490000-0x00000000025A1000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1328-468-0x0000000002490000-0x00000000025A1000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1328-472-0x0000000002490000-0x00000000025A1000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1328-473-0x0000000002490000-0x00000000025A1000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1328-471-0x0000000002490000-0x00000000025A1000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1328-474-0x0000000002490000-0x00000000025A1000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1328-477-0x0000000002490000-0x00000000025A1000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1328-480-0x0000000002490000-0x00000000025A1000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1328-485-0x0000000002490000-0x00000000025A1000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1328-524-0x0000000002490000-0x00000000025A1000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1328-523-0x0000000002490000-0x00000000025A1000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1328-522-0x0000000002490000-0x00000000025A1000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1328-521-0x0000000002490000-0x00000000025A1000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1328-520-0x0000000002490000-0x00000000025A1000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1328-519-0x0000000002490000-0x00000000025A1000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1328-518-0x0000000002490000-0x00000000025A1000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1328-517-0x0000000002490000-0x00000000025A1000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1328-516-0x0000000002490000-0x00000000025A1000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1328-515-0x0000000002490000-0x00000000025A1000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1328-514-0x0000000002490000-0x00000000025A1000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1328-513-0x0000000002490000-0x00000000025A1000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1328-512-0x0000000002490000-0x00000000025A1000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1328-511-0x0000000002490000-0x00000000025A1000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1328-510-0x0000000002490000-0x00000000025A1000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1328-509-0x0000000002490000-0x00000000025A1000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1328-508-0x0000000002490000-0x00000000025A1000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1328-507-0x0000000002490000-0x00000000025A1000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1328-506-0x0000000002490000-0x00000000025A1000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1328-505-0x0000000002490000-0x00000000025A1000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1328-504-0x0000000002490000-0x00000000025A1000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1328-503-0x0000000002490000-0x00000000025A1000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1328-502-0x0000000002490000-0x00000000025A1000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1328-501-0x0000000002490000-0x00000000025A1000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1328-500-0x0000000002490000-0x00000000025A1000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1328-499-0x0000000002490000-0x00000000025A1000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1328-498-0x0000000002490000-0x00000000025A1000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1328-497-0x0000000002490000-0x00000000025A1000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1328-496-0x0000000002490000-0x00000000025A1000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1328-495-0x0000000002490000-0x00000000025A1000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1328-494-0x0000000002490000-0x00000000025A1000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1328-493-0x0000000002490000-0x00000000025A1000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1328-492-0x0000000002490000-0x00000000025A1000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1328-491-0x0000000002490000-0x00000000025A1000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1328-490-0x0000000002490000-0x00000000025A1000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1328-489-0x0000000002490000-0x00000000025A1000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1328-488-0x0000000002490000-0x00000000025A1000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1328-487-0x0000000002490000-0x00000000025A1000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1328-486-0x0000000002490000-0x00000000025A1000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1328-484-0x0000000002490000-0x00000000025A1000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1328-483-0x0000000002490000-0x00000000025A1000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1328-482-0x0000000002490000-0x00000000025A1000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1328-481-0x0000000002490000-0x00000000025A1000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1328-479-0x0000000002490000-0x00000000025A1000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1328-478-0x0000000002490000-0x00000000025A1000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1328-476-0x0000000002490000-0x00000000025A1000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1328-475-0x0000000002490000-0x00000000025A1000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1328-1372-0x0000000002490000-0x00000000025A1000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1328-1374-0x00000000021E0000-0x0000000002361000-memory.dmp

    Filesize

    1.5MB

    Download

  • memory/1328-4121-0x0000000002490000-0x00000000025A1000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/1328-4123-0x0000000002000000-0x0000000002100000-memory.dmp

    Filesize

    1024KB

    Download

  • memory/1328-5275-0x0000000002370000-0x0000000002471000-memory.dmp

    Filesize

    1.0MB

    Download

  • memory/1328-5280-0x0000000000620000-0x00000000006C1000-memory.dmp

    Filesize

    644KB

    Download

  • memory/1328-5281-0x00000000745E0000-0x0000000074B8B000-memory.dmp

    Filesize

    5.7MB

    Download

  • memory/1328-5282-0x0000000002000000-0x0000000002100000-memory.dmp

    Filesize

    1024KB

    Download

  • memory/1328-5283-0x00000000021A1000-0x00000000021BE000-memory.dmp

    Filesize

    116KB

    Download

  • memory/1328-5284-0x00000000745E0000-0x0000000074B8B000-memory.dmp

    Filesize

    5.7MB

    Download

  • memory/1328-5285-0x0000000000400000-0x000000000061A000-memory.dmp

    Filesize

    2.1MB

    Download