Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
-
submitted
06/08/2023, 02:33
General
-
Target
--点我安装--.exe
-
Size
2.5MB
-
MD5
bfee567e1324a2398e6701300336a58a
-
SHA1
7a6c12a1d7df9828e7d43e610c34ec8a3dbae0e0
-
SHA256
e396b71edd7c534085151494e5fe185921c12212ac43d7ae1db39f7a7a9f77b9
-
SHA512
019ed96e1986867f7de6f9520bbc56b32347065613ff4e7f5337c79f888d2ffd0ace1890bedf771f9b576c80749cf195a200928a93aa63fa3764d835bf4c46e2
-
SSDEEP
49152:Megwd60SregclSHbVdGNJzHBoIyxkYJm/QxKE:Mbwd6Pre2HZdGNFBoIRYyfE
Score
8/10
Malware Config
Signatures
-
Disables Task Manager via registry modification
-
Sets desktop wallpaper using registry 2 TTPs 1 IoCs
-
Drops file in Windows directory 1 IoCs
-
Modifies Control Panel 2 IoCs
-
Modifies registry class 8 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of FindShellTrayWindow 3 IoCs
-
Suspicious use of SetWindowsHookEx 12 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\--点我安装--.exe"C:\Users\Admin\AppData\Local\Temp\--点我安装--.exe"1⤵
- Sets desktop wallpaper using registry
- Drops file in Windows directory
- Modifies Control Panel
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.5MB
-
Filesize
84KB
-
Filesize
92KB
-
Filesize
372KB
-
Filesize
40KB
-
Filesize
2.5MB