Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
-
submitted
23/07/2023, 15:27
General
-
Target
NA_NA_0d9be373b2250dexeexe_JC.exe
-
Size
406KB
-
MD5
0d9be373b2250d424d1b1a5160ac06e3
-
SHA1
1d24e7b303bf229dde748d3e1246bfe6e98df788
-
SHA256
5ee7061bc4a54697ad7b8b331331db4cc92512c8ad815b4ef8fcbfc972592e12
-
SHA512
2ea15e45b88d9ae494e3a661fd8c902f7d6066b99e09d8bd4acaba540291860712508eda80f9cee795a337cb11b0168316f6e9db1373d14a318571b180285926
-
SSDEEP
12288:2plrVbDdQaqdS/ofraFErH8uB2Wm0SXsNr5FU:SxRQ+Fucuvm0as
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\NA_NA_0d9be373b2250dexeexe_JC.exe"C:\Users\Admin\AppData\Local\Temp\NA_NA_0d9be373b2250dexeexe_JC.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\sure\headers.exe"C:\Program Files\sure\headers.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
406KB
MD551817ab17db214ca095f939b4e74e06e
SHA134ae516b59dbbeb7fed332ef65185aed9421976d
SHA256e8ff61420219c596681930ee5560d8ec6037509cb15bfb5caac0ba5d4dbc3bdb
SHA51245b0c88d579ec95bef1b86caa61460a7dc5aadf9c1d0d9ce8567afa825ee26721abc4bf98b4b406e7c7e386eff180922634824f519531469bb9bdb4bb2c121e3
-
Filesize
406KB
MD551817ab17db214ca095f939b4e74e06e
SHA134ae516b59dbbeb7fed332ef65185aed9421976d
SHA256e8ff61420219c596681930ee5560d8ec6037509cb15bfb5caac0ba5d4dbc3bdb
SHA51245b0c88d579ec95bef1b86caa61460a7dc5aadf9c1d0d9ce8567afa825ee26721abc4bf98b4b406e7c7e386eff180922634824f519531469bb9bdb4bb2c121e3
-
Filesize
406KB
MD551817ab17db214ca095f939b4e74e06e
SHA134ae516b59dbbeb7fed332ef65185aed9421976d
SHA256e8ff61420219c596681930ee5560d8ec6037509cb15bfb5caac0ba5d4dbc3bdb
SHA51245b0c88d579ec95bef1b86caa61460a7dc5aadf9c1d0d9ce8567afa825ee26721abc4bf98b4b406e7c7e386eff180922634824f519531469bb9bdb4bb2c121e3
-
Filesize
406KB
MD551817ab17db214ca095f939b4e74e06e
SHA134ae516b59dbbeb7fed332ef65185aed9421976d
SHA256e8ff61420219c596681930ee5560d8ec6037509cb15bfb5caac0ba5d4dbc3bdb
SHA51245b0c88d579ec95bef1b86caa61460a7dc5aadf9c1d0d9ce8567afa825ee26721abc4bf98b4b406e7c7e386eff180922634824f519531469bb9bdb4bb2c121e3