Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

1

efce219aed...c3.exe

windows7-x64

7

efce219aed...c3.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    142s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230221-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02/04/2023, 19:26

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    efce219aed7bf18529390e51209bff6092ba06584cf89a5ed037a4446e3cf4c3.exe

  • Size

    5.1MB

  • MD5

    950bab31158325f68cdb009cd7f0695a

  • SHA1

    b2150a706c7984efab3a48c0da0f370fe8e60671

  • SHA256

    efce219aed7bf18529390e51209bff6092ba06584cf89a5ed037a4446e3cf4c3

  • SHA512

    5032da147856b8c09b979521fd0dc7496804a95450fac08018483b280e88838c22b6b2ea2fed11bf163832d94f8043893e36752a7db3a903c2b42d574736bf82

  • SSDEEP

    98304:qDU+6lqxONesqOYNVZpis6uipz176BaupBoch:nqsNesOQs6pEpBo

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\efce219aed7bf18529390e51209bff6092ba06584cf89a5ed037a4446e3cf4c3.exe
    "C:\Users\Admin\AppData\Local\Temp\efce219aed7bf18529390e51209bff6092ba06584cf89a5ed037a4446e3cf4c3.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of SetWindowsHookEx
    PID:4980

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\e56767d.tmp
    Filesize

    333KB

    MD5

    56a2bcecbd3cddd6f4a35361bf4920d6

    SHA1

    992e63be423f0e61093ba183f49fc0cbec790488

    SHA256

    5fcfac18758a12e0e717a5189f379922a32b5ac12f26491e638d70b54ae1dcab

    SHA512

    473cbdf760242db1f0f1d0c27046c0564998f2bf931ad03feb28af3c7bd253d00e6f0836dadf37f29e0db4171eb64e6a15ed4cb9a9d28b48fb0aab601573f551

    Download Submit

  • memory/4980-133-0x0000000010000000-0x0000000010116000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/4980-150-0x0000000061080000-0x0000000061119000-memory.dmp

    Filesize

    612KB

    Download