Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
-
submitted
15/07/2023, 11:10
General
-
Target
3c0bed4efdb10fexeexe_JC.exe
-
Size
239KB
-
MD5
3c0bed4efdb10f7540c4b495af0f6702
-
SHA1
2214db078596c134dfea10e62148d9a83b505511
-
SHA256
621aa1243a36c0316c2053a433b516ad08f2a11f11bb069a4e5913a98d89e274
-
SHA512
f8705fe9dbafba57595c5e485e7c8e1e96edc991f32114fc8ae236869cd3ee1f505e918a89e6a76383ad184733f628b3a0b2dd3fc7038457c5cce12f12162235
-
SSDEEP
3072:lxUm75Fku3eKeO213SJReOqdmErj+HyHnNVIPL/+ybbiW1u46Q7qV3lU8xM:fU8Dk11CJ1qDWUNVIT/bblS9x
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3c0bed4efdb10fexeexe_JC.exe"C:\Users\Admin\AppData\Local\Temp\3c0bed4efdb10fexeexe_JC.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\.exe"C:\Program Files\\.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
239KB
MD530774263d6ce919b8b6836a35cb69601
SHA1506c0ec4ca642b518a3172046e7aff7d3e6d3117
SHA256c6e868f96bf765400474a9247c6877aae4257ac1ec18c84a3374ed18d326e654
SHA51262a07f50194fbbd19da4b9016447d3b233ea957d476d4da504b219e9f823fcf2a5b03f61b56551b56600381eccb5f56e4306ddbfb41694d9f224e2fadb2ba1ec
-
Filesize
239KB
MD530774263d6ce919b8b6836a35cb69601
SHA1506c0ec4ca642b518a3172046e7aff7d3e6d3117
SHA256c6e868f96bf765400474a9247c6877aae4257ac1ec18c84a3374ed18d326e654
SHA51262a07f50194fbbd19da4b9016447d3b233ea957d476d4da504b219e9f823fcf2a5b03f61b56551b56600381eccb5f56e4306ddbfb41694d9f224e2fadb2ba1ec
-
Filesize
239KB
MD530774263d6ce919b8b6836a35cb69601
SHA1506c0ec4ca642b518a3172046e7aff7d3e6d3117
SHA256c6e868f96bf765400474a9247c6877aae4257ac1ec18c84a3374ed18d326e654
SHA51262a07f50194fbbd19da4b9016447d3b233ea957d476d4da504b219e9f823fcf2a5b03f61b56551b56600381eccb5f56e4306ddbfb41694d9f224e2fadb2ba1ec
-
Filesize
239KB
MD530774263d6ce919b8b6836a35cb69601
SHA1506c0ec4ca642b518a3172046e7aff7d3e6d3117
SHA256c6e868f96bf765400474a9247c6877aae4257ac1ec18c84a3374ed18d326e654
SHA51262a07f50194fbbd19da4b9016447d3b233ea957d476d4da504b219e9f823fcf2a5b03f61b56551b56600381eccb5f56e4306ddbfb41694d9f224e2fadb2ba1ec