Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
143s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
-
submitted
23/07/2023, 15:27
General
-
Target
NA_NA_0d9be373b2250dexeexe_JC.exe
-
Size
406KB
-
MD5
0d9be373b2250d424d1b1a5160ac06e3
-
SHA1
1d24e7b303bf229dde748d3e1246bfe6e98df788
-
SHA256
5ee7061bc4a54697ad7b8b331331db4cc92512c8ad815b4ef8fcbfc972592e12
-
SHA512
2ea15e45b88d9ae494e3a661fd8c902f7d6066b99e09d8bd4acaba540291860712508eda80f9cee795a337cb11b0168316f6e9db1373d14a318571b180285926
-
SSDEEP
12288:2plrVbDdQaqdS/ofraFErH8uB2Wm0SXsNr5FU:SxRQ+Fucuvm0as
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\NA_NA_0d9be373b2250dexeexe_JC.exe"C:\Users\Admin\AppData\Local\Temp\NA_NA_0d9be373b2250dexeexe_JC.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\headers\build.exe"C:\Program Files\headers\build.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
406KB
MD55b0d60f60c645936f702ae6aa7038a10
SHA159c1860c94b4ae511900b2b690776bbdaf7a06c2
SHA256d9f9de76678affe981ccf320fc5c9af54b1a6a895a86631815f68a540da6b8f9
SHA512837d62a5a2c0c75e2375e8aea7c9409238e1f73b69d5259149c14a501db6de5cb8a3d5f58e739c8baa5b648158db4183720f3bf62e3913a99e02f4de7280fe57
-
Filesize
406KB
MD55b0d60f60c645936f702ae6aa7038a10
SHA159c1860c94b4ae511900b2b690776bbdaf7a06c2
SHA256d9f9de76678affe981ccf320fc5c9af54b1a6a895a86631815f68a540da6b8f9
SHA512837d62a5a2c0c75e2375e8aea7c9409238e1f73b69d5259149c14a501db6de5cb8a3d5f58e739c8baa5b648158db4183720f3bf62e3913a99e02f4de7280fe57