Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
141s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
-
submitted
23/07/2023, 19:45
General
-
Target
NA_NA_2f9db87078c155exeexe_JC.exe
-
Size
371KB
-
MD5
2f9db87078c155fbd98f576d4edff7a3
-
SHA1
4cea085b3a33a3e31ca598add6431943869f95d4
-
SHA256
2e820477232a35d074e2c602686fadcbe3583b9ab4052e1ce48de0a8df56cb1f
-
SHA512
4de590765ff621ed36b40bc41a9bf351458f17d29f0e691dd28d61115073c67ae93ed766baeaa864f8ada1ac6babedba0f465c14413038512f66c0c519359240
-
SSDEEP
6144:zplrlbbDdQaqd2X/96fr3KFEUGjr8uB2WgcA0cpXEVNrvGZ4FUqm6:zplrVbDdQaqdS/ofraFErH8uB2Wm0SXj
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\NA_NA_2f9db87078c155exeexe_JC.exe"C:\Users\Admin\AppData\Local\Temp\NA_NA_2f9db87078c155exeexe_JC.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\instead\previous.exe"C:\Program Files\instead\previous.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
371KB
MD5b793228bb3856b82387c9c66fe4e09af
SHA114fb03f44c4a2b530a9d354eae13c4b8f0fd630b
SHA25615aef37eea1cb5a8325c05f93d80f1007888d3f3308909376bc57371c9ae1463
SHA512f000fd1748d989a90593631dedcc619cb758ad42cee62a0b364022fb41c1f77067ece93f27ce032cc99d36a3ea5bf3da0265c9031861c59b25dfdc7b431cfd91
-
Filesize
371KB
MD5b793228bb3856b82387c9c66fe4e09af
SHA114fb03f44c4a2b530a9d354eae13c4b8f0fd630b
SHA25615aef37eea1cb5a8325c05f93d80f1007888d3f3308909376bc57371c9ae1463
SHA512f000fd1748d989a90593631dedcc619cb758ad42cee62a0b364022fb41c1f77067ece93f27ce032cc99d36a3ea5bf3da0265c9031861c59b25dfdc7b431cfd91