Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

1

Static

static

1

d7c045aa8a...7e.exe

windows7-x64

1

d7c045aa8a...7e.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    132s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13/04/2023, 20:19

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    d7c045aa8aa762a875db5f598c54b6b8a55c3b1ca0165f1659cc593bd8b16f7e.exe

  • Size

    1.4MB

  • MD5

    f2c3e0f84908e583f194cdc1036a580c

  • SHA1

    a1c2167fa9bb5f84b1ad24f379dad864356c745c

  • SHA256

    d7c045aa8aa762a875db5f598c54b6b8a55c3b1ca0165f1659cc593bd8b16f7e

  • SHA512

    b85faff2f4a49847646a59808c8ac480ab7df4a3e77d6cc9903fb2c71657cb393ed104519fd1326d3780f86e27f4599ef69a49ebf3315ce03b85a5d496e3c7f9

  • SSDEEP

    24576:P78IbxqZf/Hm8Uq2ad08vOj/UJmuRshx/a1I/pq/2s66l5B:jq/HmI+lUIuRreA2sB

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 6 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\d7c045aa8aa762a875db5f598c54b6b8a55c3b1ca0165f1659cc593bd8b16f7e.exe
    "C:\Users\Admin\AppData\Local\Temp\d7c045aa8aa762a875db5f598c54b6b8a55c3b1ca0165f1659cc593bd8b16f7e.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4400

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\8OI4IV75\NewErrorPageTemplate[1]
    Filesize

    1KB

    MD5

    dfeabde84792228093a5a270352395b6

    SHA1

    e41258c9576721025926326f76063c2305586f76

    SHA256

    77b138ab5d0a90ff04648c26addd5e414cc178165e3b54a4cb3739da0f58e075

    SHA512

    e256f603e67335151bb709294749794e2e3085f4063c623461a0b3decbcca8e620807b707ec9bcbe36dcd7d639c55753da0495be85b4ae5fb6bfc52ab4b284fd

    Download Submit

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\UUIKWEAJ\errorPageStrings[1]
    Filesize

    4KB

    MD5

    d65ec06f21c379c87040b83cc1abac6b

    SHA1

    208d0a0bb775661758394be7e4afb18357e46c8b

    SHA256

    a1270e90cea31b46432ec44731bf4400d22b38eb2855326bf934fe8f1b169a4f

    SHA512

    8a166d26b49a5d95aea49bc649e5ea58786a2191f4d2adac6f5fbb7523940ce4482d6a2502aa870a931224f215cb2010a8c9b99a2c1820150e4d365cab28299e

    Download Submit

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\UUIKWEAJ\httpErrorPagesScripts[1]
    Filesize

    11KB

    MD5

    9234071287e637f85d721463c488704c

    SHA1

    cca09b1e0fba38ba29d3972ed8dcecefdef8c152

    SHA256

    65cc039890c7ceb927ce40f6f199d74e49b8058c3f8a6e22e8f916ad90ea8649

    SHA512

    87d691987e7a2f69ad8605f35f94241ab7e68ad4f55ad384f1f0d40dc59ffd1432c758123661ee39443d624c881b01dcd228a67afb8700fe5e66fc794a6c0384

    Download Submit

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\WPCK8CWE\dnserrordiagoff[1]
    Filesize

    1KB

    MD5

    7e81a79f38695e467a49ee41dd24146d

    SHA1

    035e110c36bf3072525b05394f73d1ba54d0d316

    SHA256

    a705d1e0916a79b0d6e60c41a9ce301ed95b3fc00e927f940ab27061c208a536

    SHA512

    53c5f2f2b9ad8b555f9ae6644941cf2016108e803ea6ab2c7418e31e66874dea5a2bc04be0fa9766e7206617879520e730e9e3e0de136bae886c2e786082d622

    Download Submit

  • memory/4400-189-0x0000000007EF0000-0x0000000007F41000-memory.dmp

    Filesize

    324KB

    Download

  • memory/4400-195-0x0000000007EF0000-0x0000000007F41000-memory.dmp

    Filesize

    324KB

    Download

  • memory/4400-173-0x0000000007EF0000-0x0000000007F41000-memory.dmp

    Filesize

    324KB

    Download

  • memory/4400-175-0x0000000007EF0000-0x0000000007F41000-memory.dmp

    Filesize

    324KB

    Download

  • memory/4400-177-0x0000000007EF0000-0x0000000007F41000-memory.dmp

    Filesize

    324KB

    Download

  • memory/4400-179-0x0000000007EF0000-0x0000000007F41000-memory.dmp

    Filesize

    324KB

    Download

  • memory/4400-181-0x0000000007EF0000-0x0000000007F41000-memory.dmp

    Filesize

    324KB

    Download

  • memory/4400-183-0x0000000007EF0000-0x0000000007F41000-memory.dmp

    Filesize

    324KB

    Download

  • memory/4400-185-0x0000000007EF0000-0x0000000007F41000-memory.dmp

    Filesize

    324KB

    Download

  • memory/4400-187-0x0000000007EF0000-0x0000000007F41000-memory.dmp

    Filesize

    324KB

    Download

  • memory/4400-169-0x0000000007EF0000-0x0000000007F41000-memory.dmp

    Filesize

    324KB

    Download

  • memory/4400-191-0x0000000007EF0000-0x0000000007F41000-memory.dmp

    Filesize

    324KB

    Download

  • memory/4400-193-0x0000000007EF0000-0x0000000007F41000-memory.dmp

    Filesize

    324KB

    Download

  • memory/4400-170-0x0000000007EF0000-0x0000000007F41000-memory.dmp

    Filesize

    324KB

    Download

  • memory/4400-197-0x0000000007EF0000-0x0000000007F41000-memory.dmp

    Filesize

    324KB

    Download

  • memory/4400-200-0x0000000007EF0000-0x0000000007F41000-memory.dmp

    Filesize

    324KB

    Download

  • memory/4400-203-0x0000000007EF0000-0x0000000007F41000-memory.dmp

    Filesize

    324KB

    Download

  • memory/4400-202-0x0000000007F60000-0x0000000007F61000-memory.dmp

    Filesize

    4KB

    Download

  • memory/4400-205-0x0000000007EF0000-0x0000000007F41000-memory.dmp

    Filesize

    324KB

    Download

  • memory/4400-207-0x0000000007EF0000-0x0000000007F41000-memory.dmp

    Filesize

    324KB

    Download

  • memory/4400-209-0x0000000007EF0000-0x0000000007F41000-memory.dmp

    Filesize

    324KB

    Download

  • memory/4400-211-0x0000000007EF0000-0x0000000007F41000-memory.dmp

    Filesize

    324KB

    Download

  • memory/4400-213-0x0000000007EF0000-0x0000000007F41000-memory.dmp

    Filesize

    324KB

    Download

  • memory/4400-215-0x0000000007EF0000-0x0000000007F41000-memory.dmp

    Filesize

    324KB

    Download

  • memory/4400-240-0x0000000007EF0000-0x0000000007F41000-memory.dmp

    Filesize

    324KB

    Download