Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    25s
  • max time network
    32s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    05/05/2023, 19:20

General

  • Target

    a2b5de2a93c573cb64ad5dd7a2152a3083bad6026b0169766c9d3f79c9787887.exe

  • Size

    448KB

  • MD5

    a370a97dc4b1545b5f3a5f603529119a

  • SHA1

    7014789301f00748fbc648619c71e853448a016d

  • SHA256

    a2b5de2a93c573cb64ad5dd7a2152a3083bad6026b0169766c9d3f79c9787887

  • SHA512

    bbe33d81308b2c71fdb6bbe39ed09a10d9b73ef253c44478e7d043514b685c6cb78d5d896bbbd44f90511048b04a8cf90d104e2eac9cecef6f91b320e394936c

  • SSDEEP

    12288:8CdeX8QS03ULaHNqrxlKIQNohstOnwdClJN/1affff:8CbkEaHNYK3dp8nc3ff

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\a2b5de2a93c573cb64ad5dd7a2152a3083bad6026b0169766c9d3f79c9787887.exe
    "C:\Users\Admin\AppData\Local\Temp\a2b5de2a93c573cb64ad5dd7a2152a3083bad6026b0169766c9d3f79c9787887.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1676

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1676-54-0x0000000000400000-0x000000000049D000-memory.dmp

    Filesize

    628KB

  • memory/1676-57-0x0000000000280000-0x00000000002E0000-memory.dmp

    Filesize

    384KB

  • memory/1676-58-0x00000000002E0000-0x00000000002E1000-memory.dmp

    Filesize

    4KB

  • memory/1676-59-0x00000000002F0000-0x00000000002F1000-memory.dmp

    Filesize

    4KB

  • memory/1676-60-0x0000000000310000-0x0000000000311000-memory.dmp

    Filesize

    4KB

  • memory/1676-61-0x0000000000270000-0x0000000000271000-memory.dmp

    Filesize

    4KB

  • memory/1676-62-0x0000000000260000-0x0000000000261000-memory.dmp

    Filesize

    4KB

  • memory/1676-63-0x0000000000330000-0x0000000000331000-memory.dmp

    Filesize

    4KB

  • memory/1676-64-0x0000000000300000-0x0000000000301000-memory.dmp

    Filesize

    4KB

  • memory/1676-65-0x00000000004C0000-0x00000000004C1000-memory.dmp

    Filesize

    4KB

  • memory/1676-66-0x00000000004D0000-0x00000000004D1000-memory.dmp

    Filesize

    4KB

  • memory/1676-67-0x00000000003E0000-0x00000000003E1000-memory.dmp

    Filesize

    4KB

  • memory/1676-68-0x00000000004A0000-0x00000000004A1000-memory.dmp

    Filesize

    4KB

  • memory/1676-69-0x00000000004F0000-0x00000000004F1000-memory.dmp

    Filesize

    4KB

  • memory/1676-70-0x0000000000550000-0x0000000000551000-memory.dmp

    Filesize

    4KB

  • memory/1676-71-0x00000000005F0000-0x00000000005F1000-memory.dmp

    Filesize

    4KB

  • memory/1676-72-0x0000000000600000-0x0000000000601000-memory.dmp

    Filesize

    4KB

  • memory/1676-73-0x0000000000570000-0x0000000000571000-memory.dmp

    Filesize

    4KB

  • memory/1676-74-0x0000000000630000-0x0000000000631000-memory.dmp

    Filesize

    4KB

  • memory/1676-75-0x00000000005E0000-0x00000000005E1000-memory.dmp

    Filesize

    4KB

  • memory/1676-76-0x00000000005D0000-0x00000000005D1000-memory.dmp

    Filesize

    4KB

  • memory/1676-77-0x0000000000620000-0x0000000000621000-memory.dmp

    Filesize

    4KB

  • memory/1676-78-0x0000000000500000-0x0000000000501000-memory.dmp

    Filesize

    4KB

  • memory/1676-79-0x0000000003590000-0x00000000035A1000-memory.dmp

    Filesize

    68KB

  • memory/1676-81-0x0000000000280000-0x00000000002E0000-memory.dmp

    Filesize

    384KB

  • memory/1676-80-0x0000000000400000-0x000000000049D000-memory.dmp

    Filesize

    628KB