Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    141s
  • max time network
    145s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/04/2023, 19:33

General

  • Target

    5046eeb8dce061a767bc44220a2fa061dd761c2892c2ba89e516bf66102590e8.exe

  • Size

    2.8MB

  • MD5

    4e7d4d3426ed086b97fc574e5a687352

  • SHA1

    4d33860277af5a898f77e496a95f3c280deb6d97

  • SHA256

    5046eeb8dce061a767bc44220a2fa061dd761c2892c2ba89e516bf66102590e8

  • SHA512

    216ce493a24845022bbffe20292b8abed186d61fd77ea86ff5b2c1fa749be6035978a7dc9c7bfbc67910abc5ab815ea46096057d2d6f686df55f6eff645dd9f0

  • SSDEEP

    49152:gLRthiZ/5VDDTd30M4eDheLi/Sml8EG3udIi930pqUI8cmzBkp3:gVuZxdTzii/d6ub3lSLk

Score
1/10

Malware Config

Signatures

  • Suspicious use of FindShellTrayWindow 6 IoCs
  • Suspicious use of SendNotifyMessage 6 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\5046eeb8dce061a767bc44220a2fa061dd761c2892c2ba89e516bf66102590e8.exe
    "C:\Users\Admin\AppData\Local\Temp\5046eeb8dce061a767bc44220a2fa061dd761c2892c2ba89e516bf66102590e8.exe"
    1⤵
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:3240

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3240-133-0x0000000000400000-0x0000000000D41000-memory.dmp

    Filesize

    9.3MB

  • memory/3240-134-0x0000000000400000-0x0000000000D41000-memory.dmp

    Filesize

    9.3MB

  • memory/3240-135-0x0000000000400000-0x0000000000D41000-memory.dmp

    Filesize

    9.3MB

  • memory/3240-136-0x0000000000400000-0x0000000000D41000-memory.dmp

    Filesize

    9.3MB

  • memory/3240-137-0x0000000000400000-0x0000000000D41000-memory.dmp

    Filesize

    9.3MB

  • memory/3240-138-0x0000000002AC0000-0x0000000002AC1000-memory.dmp

    Filesize

    4KB

  • memory/3240-139-0x0000000000400000-0x0000000000D41000-memory.dmp

    Filesize

    9.3MB

  • memory/3240-140-0x0000000002AC0000-0x0000000002AC1000-memory.dmp

    Filesize

    4KB

  • memory/3240-141-0x0000000000400000-0x0000000000D41000-memory.dmp

    Filesize

    9.3MB

  • memory/3240-146-0x0000000000400000-0x0000000000D41000-memory.dmp

    Filesize

    9.3MB

  • memory/3240-147-0x0000000000400000-0x0000000000D41000-memory.dmp

    Filesize

    9.3MB

  • memory/3240-148-0x0000000000400000-0x0000000000D41000-memory.dmp

    Filesize

    9.3MB

  • memory/3240-149-0x0000000000400000-0x0000000000D41000-memory.dmp

    Filesize

    9.3MB