Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
117s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
-
submitted
19/07/2023, 13:54
General
-
Target
eb9a503a67e518exe_JC.exe
-
Size
409KB
-
MD5
eb9a503a67e518594b4092c339e29170
-
SHA1
c45f80373b0d8d93cb0b78a6f2aa8dcfb5af8a11
-
SHA256
bc0f3f136280782dbed0dc240e08fc3e4f2bb4ec0beb0fa9917a7b41fbc04ab3
-
SHA512
90f79c862e4fe8babf5d605b12f5457d6a57214a6d6f76851b9c55c8393dd5c8fbde1ae1ec2146a6cfa064b5f5453f1115675030672629c1aad1805c7a40a526
-
SSDEEP
12288:1plrVbDdQaqdS/ofraFErH8uB2Wm0SXsNr5FU:nxRQ+Fucuvm0as
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\eb9a503a67e518exe_JC.exe"C:\Users\Admin\AppData\Local\Temp\eb9a503a67e518exe_JC.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Sample\GetVersion.exe"C:\Program Files\Sample\GetVersion.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
409KB
MD50a0a0a1c4334ac1083ab1d66e1894e48
SHA17f7fd3995fb1e73add79d7d7d0544fb6dd5990ae
SHA256a80fa8e38b5893bad7ec7e3143b57d4bff8736f632748a162bafad371626b426
SHA51288c198969053ae92c153832e09ff1e5ac68b0bb9115510236a09e8c4b0da6c03288914c6758a940677b50ea146f1710b35c69775095c119083ece4e8d911f9d8
-
Filesize
409KB
MD50a0a0a1c4334ac1083ab1d66e1894e48
SHA17f7fd3995fb1e73add79d7d7d0544fb6dd5990ae
SHA256a80fa8e38b5893bad7ec7e3143b57d4bff8736f632748a162bafad371626b426
SHA51288c198969053ae92c153832e09ff1e5ac68b0bb9115510236a09e8c4b0da6c03288914c6758a940677b50ea146f1710b35c69775095c119083ece4e8d911f9d8
-
Filesize
409KB
MD50a0a0a1c4334ac1083ab1d66e1894e48
SHA17f7fd3995fb1e73add79d7d7d0544fb6dd5990ae
SHA256a80fa8e38b5893bad7ec7e3143b57d4bff8736f632748a162bafad371626b426
SHA51288c198969053ae92c153832e09ff1e5ac68b0bb9115510236a09e8c4b0da6c03288914c6758a940677b50ea146f1710b35c69775095c119083ece4e8d911f9d8
-
Filesize
409KB
MD50a0a0a1c4334ac1083ab1d66e1894e48
SHA17f7fd3995fb1e73add79d7d7d0544fb6dd5990ae
SHA256a80fa8e38b5893bad7ec7e3143b57d4bff8736f632748a162bafad371626b426
SHA51288c198969053ae92c153832e09ff1e5ac68b0bb9115510236a09e8c4b0da6c03288914c6758a940677b50ea146f1710b35c69775095c119083ece4e8d911f9d8