Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

kyan-cli.exe

windows7-x64

1

kyan-cli.exe

windows10-2004-x64

1

kyan-qt.exe

windows7-x64

1

kyan-qt.exe

windows10-2004-x64

1

kyan-tx.exe

windows7-x64

1

kyan-tx.exe

windows10-2004-x64

1

kyand.exe

windows7-x64

1

kyand.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    22s
  • max time network
    32s
  • platform
    windows7_x64
  • resource
    win7-20230621-en
  • resource tags

    arch:x64arch:x86image:win7-20230621-enlocale:en-usos:windows7-x64system
  • submitted
    01/07/2023, 12:04

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    kyan-cli.exe

  • Size

    9.8MB

  • MD5

    efe973a15f4a574cfe3f89184e11dde3

  • SHA1

    9b78c149f34bf5187090a2604bd2fc716035b714

  • SHA256

    a9942702d065dfb04996fad6c8a46853864135f202c2ddc5b6429c2f12321191

  • SHA512

    e9dd010020a5d3ad827a78dd47253530d10f7fed5fe5f494375f6a217ff49721ca1f13c229749987210c627620cdd42fd8077a8e7d17daf2027eef2ce53747d4

  • SSDEEP

    98304:wM/aO0Xw7YmR7ZUxny/wwgX6DbezdI0RnoNHYKuiuobgvshPRUy0e5mBEe7Jsxx6:weT1rSxX7u6

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\kyan-cli.exe
    "C:\Users\Admin\AppData\Local\Temp\kyan-cli.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:1092

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1092-54-0x0000000000400000-0x0000000000B90000-memory.dmp

    Filesize

    7.6MB

    Download