Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

BAD/Saved ...to.exe

windows7-x64

1

BAD/Saved ...to.exe

windows10-2004-x64

1

BAD/Saved ...nr.exe

windows7-x64

1

BAD/Saved ...nr.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    135s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03/05/2023, 18:42

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    BAD/Saved Files2/heronnr.exe

  • Size

    17.9MB

  • MD5

    e6081655ea53c54c897950a4c3ca81ff

  • SHA1

    759dab319f84e4783dacb32aab0d0ca75fb84b0b

  • SHA256

    0751af145a6f6964dafb50c99c4f5e20ad427f44b2b49b657006f76579a9227b

  • SHA512

    198294153d28144ffa9ef87a53e6683829d2c438cfb36cb4e55b41664ca6967e7c508bd6edac6ceaeb0a43eed31d6a6613ea6e63f88f3d2aea868ae3321cefc8

  • SSDEEP

    393216:PckkI8zdlCklvVKIgmhZU4R5zJR8lP4ulZhiRQQlYpRgGPVzo1q:PcfI8yklhgmhZTboP/hiRQdpRBPVE1

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\BAD\Saved Files2\heronnr.exe
    "C:\Users\Admin\AppData\Local\Temp\BAD\Saved Files2\heronnr.exe"
    1⤵
      PID:1452

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1452-133-0x0000000000400000-0x00000000015E7000-memory.dmp

      Filesize

      17.9MB

      Download