Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
140s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
-
submitted
19/07/2023, 13:54
General
-
Target
eb9a503a67e518exe_JC.exe
-
Size
409KB
-
MD5
eb9a503a67e518594b4092c339e29170
-
SHA1
c45f80373b0d8d93cb0b78a6f2aa8dcfb5af8a11
-
SHA256
bc0f3f136280782dbed0dc240e08fc3e4f2bb4ec0beb0fa9917a7b41fbc04ab3
-
SHA512
90f79c862e4fe8babf5d605b12f5457d6a57214a6d6f76851b9c55c8393dd5c8fbde1ae1ec2146a6cfa064b5f5453f1115675030672629c1aad1805c7a40a526
-
SSDEEP
12288:1plrVbDdQaqdS/ofraFErH8uB2Wm0SXsNr5FU:nxRQ+Fucuvm0as
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\eb9a503a67e518exe_JC.exe"C:\Users\Admin\AppData\Local\Temp\eb9a503a67e518exe_JC.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\GetVersion\application.exe"C:\Program Files\GetVersion\application.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
409KB
MD526a017957980644775fdeab4e9658b3b
SHA16a9cf66ece5c8966b5be7ca0602a9d0f239b4189
SHA25604fc6cfc53b1fc832417c4432b1a1b312aba0baf106cc0e4022a7d0fa8bf798c
SHA51291c13c616b8bfe1bca72a8bb06b14894f1cebafba2281a76631f6564fc4b96d360db1db3ca14afb9b7c8f56fa2a9b3e0bceeda63c223b6c5c42661a735c835a2
-
Filesize
409KB
MD526a017957980644775fdeab4e9658b3b
SHA16a9cf66ece5c8966b5be7ca0602a9d0f239b4189
SHA25604fc6cfc53b1fc832417c4432b1a1b312aba0baf106cc0e4022a7d0fa8bf798c
SHA51291c13c616b8bfe1bca72a8bb06b14894f1cebafba2281a76631f6564fc4b96d360db1db3ca14afb9b7c8f56fa2a9b3e0bceeda63c223b6c5c42661a735c835a2