Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    02/01/2023, 00:13

Errors

Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\Uses of Additional Files\WinAll\BeholdTV\amd64\ttm6010.exe command="C:\Users\Admin\AppData\Local\Temp\Uses of Additional Files\WinAll\BeholdTV\amd64\ttm6010.exe" wdir=C:\Users\Admin\AppData\Local\Temp\Uses of Additional Files\WinAll\BeholdTV\amd64 Payload error: The %1 application cannot be run in Win32 mode.

General

  • Target

    Uses of Additional Files/WinAll/BeholdTV/amd64/ttm6010.exe

  • Size

    160KB

  • MD5

    216a6873a34eb96db27668f2128abce9

  • SHA1

    ee6f09b88c003714e50c2783e15c770874e1cfd3

  • SHA256

    04f0f0d6ab22c6fd100e3e3277e54f0f9852b7a2251d1bd8f94befd55fae351a

  • SHA512

    c0e858ae1a0fa94a188d2be3bd4a2671ec4cfcaca206ee86bcfa17f7c98325e6150dec10a8a6b9654e33d1ec1a88bc116dcaa24cd1c7bb5f9974dee72184df5f

  • SSDEEP

    3072:hVhoEmXJ0beoQrW+7bmvSZgRCxvYd9VEjx9YHSc:hVhoEJioQDmaCCxvQVEjxGH

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\Uses of Additional Files\WinAll\BeholdTV\amd64\ttm6010.exe
    "C:\Users\Admin\AppData\Local\Temp\Uses of Additional Files\WinAll\BeholdTV\amd64\ttm6010.exe"
    1⤵
      PID:1220

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1220-54-0x0000000000010000-0x0000000000038200-memory.dmp

      Filesize

      160KB