Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    152s
  • max time network
    156s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06/12/2022, 13:19

General

  • Target

    fd1e6878b0a3b99c2de4c7d50f0ce3b70956a625dab2f962b399d8ac06a850cd.exe

  • Size

    1.6MB

  • MD5

    7df90a607dba58822e2df864063c6f8e

  • SHA1

    824c4e4a554f84cdf0d1d489705c46b85b4d8d3e

  • SHA256

    fd1e6878b0a3b99c2de4c7d50f0ce3b70956a625dab2f962b399d8ac06a850cd

  • SHA512

    8cb3688bf00676e91175390396d8108787bd0a405745e6e9afb693c94d679edb767ae63917b2f57def8745740e36086efefa639f90a4d739081d42efc0670e97

  • SSDEEP

    49152:eO9E2gDpp6oIGZt80+s6yODFxFoarvY7GGwJBzcEI2:IjDpp6mDUxyarewFI2

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\fd1e6878b0a3b99c2de4c7d50f0ce3b70956a625dab2f962b399d8ac06a850cd.exe
    "C:\Users\Admin\AppData\Local\Temp\fd1e6878b0a3b99c2de4c7d50f0ce3b70956a625dab2f962b399d8ac06a850cd.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    PID:4584

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4584-132-0x0000000000400000-0x000000000061A000-memory.dmp

    Filesize

    2.1MB

  • memory/4584-133-0x0000000077380000-0x0000000077523000-memory.dmp

    Filesize

    1.6MB

  • memory/4584-134-0x0000000076DF0000-0x0000000077005000-memory.dmp

    Filesize

    2.1MB

  • memory/4584-136-0x0000000076BA0000-0x0000000076D40000-memory.dmp

    Filesize

    1.6MB

  • memory/4584-137-0x0000000077100000-0x000000007717A000-memory.dmp

    Filesize

    488KB

  • memory/4584-1485-0x0000000000C50000-0x0000000000D50000-memory.dmp

    Filesize

    1024KB

  • memory/4584-1486-0x0000000074450000-0x0000000074A01000-memory.dmp

    Filesize

    5.7MB

  • memory/4584-1487-0x0000000000C50000-0x0000000000D50000-memory.dmp

    Filesize

    1024KB

  • memory/4584-1488-0x0000000074450000-0x0000000074A01000-memory.dmp

    Filesize

    5.7MB

  • memory/4584-1489-0x0000000000C50000-0x0000000000D50000-memory.dmp

    Filesize

    1024KB

  • memory/4584-1490-0x0000000000C50000-0x0000000000D50000-memory.dmp

    Filesize

    1024KB

  • memory/4584-1491-0x0000000000400000-0x000000000061A000-memory.dmp

    Filesize

    2.1MB