Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

06/02/2023, 16:27

230206-tx6fsaab2s 1

06/02/2023, 16:22

230206-tvn4qaaa8w 1

Analysis

  • max time kernel
    148s
  • max time network
    139s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-es
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-eslocale:es-esos:windows10-2004-x64systemwindows
  • submitted
    06/02/2023, 16:27

General

  • Target

    HackTheGame121.zip

  • Size

    1.1MB

  • MD5

    8ac886ed7823b74c84861077b5fde6a9

  • SHA1

    83f6f36269abda4d2cd3d047d47acf6b72d4109f

  • SHA256

    d6292010c9b014922b6b47a83b47ffa8ab0e3ccf52db918b98c7145b46c95af5

  • SHA512

    60c4fa30a3d2b3cb7f683bb2dd1c0d1ba93193dfbb11554d79c2b8317acfa827278070920b4436f4bc865019fee87ef5acb0456acd7ef303babfe527628c4c76

  • SSDEEP

    24576:dJ/wt/6jluilPQK0Jy+Yb5f3NYDPwQuP7gV5FICIjUaA1mxToUXdVVv:d6UjluilYK9bd3NYDoQ5FZFKo6xv

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Windows\Explorer.exe
    C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\HackTheGame121.zip
    1⤵
      PID:4392
    • C:\Windows\System32\rundll32.exe
      C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
      1⤵
        PID:4376
      • C:\Users\Admin\Desktop\HackTheGame121\HackTheGame.exe
        "C:\Users\Admin\Desktop\HackTheGame121\HackTheGame.exe"
        1⤵
        • Suspicious use of SetWindowsHookEx
        PID:3244

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads