Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20230712-en
  • resource tags

    arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
  • submitted
    15/08/2023, 09:53

General

  • Target

    f802761f6f5c13d3faed9fda8fa30b7a1e42bc04454a6ef267953d8cd0dcd320.exe

  • Size

    3.2MB

  • MD5

    e82ac09c5861ea183171c70b9332de16

  • SHA1

    5a514790c3ad530911934451718528615650850a

  • SHA256

    f802761f6f5c13d3faed9fda8fa30b7a1e42bc04454a6ef267953d8cd0dcd320

  • SHA512

    e0267343163dfae0df0f6ab7dc641fb4c24a2981d7578af081076c1ea0ff5c12b361c2943d250ffafce153b07a00ec6d28b50a1b54dd3e162038b017321b7a2d

  • SSDEEP

    98304:zZBXN1WIJrGDRRwOU8C4VMy/3gAJ7P5Rms5V:FBXNcW785w4rS8V

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 19 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f802761f6f5c13d3faed9fda8fa30b7a1e42bc04454a6ef267953d8cd0dcd320.exe
    "C:\Users\Admin\AppData\Local\Temp\f802761f6f5c13d3faed9fda8fa30b7a1e42bc04454a6ef267953d8cd0dcd320.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    PID:2468

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2468-54-0x0000000000400000-0x0000000000959000-memory.dmp

    Filesize

    5.3MB

  • memory/2468-55-0x0000000076E10000-0x0000000076E57000-memory.dmp

    Filesize

    284KB

  • memory/2468-866-0x0000000002770000-0x0000000002881000-memory.dmp

    Filesize

    1.1MB

  • memory/2468-865-0x0000000002770000-0x0000000002881000-memory.dmp

    Filesize

    1.1MB

  • memory/2468-870-0x0000000002770000-0x0000000002881000-memory.dmp

    Filesize

    1.1MB

  • memory/2468-868-0x0000000002770000-0x0000000002881000-memory.dmp

    Filesize

    1.1MB

  • memory/2468-872-0x0000000002770000-0x0000000002881000-memory.dmp

    Filesize

    1.1MB

  • memory/2468-876-0x0000000002770000-0x0000000002881000-memory.dmp

    Filesize

    1.1MB

  • memory/2468-878-0x0000000002770000-0x0000000002881000-memory.dmp

    Filesize

    1.1MB

  • memory/2468-874-0x0000000002770000-0x0000000002881000-memory.dmp

    Filesize

    1.1MB

  • memory/2468-880-0x0000000002770000-0x0000000002881000-memory.dmp

    Filesize

    1.1MB

  • memory/2468-884-0x0000000002770000-0x0000000002881000-memory.dmp

    Filesize

    1.1MB

  • memory/2468-882-0x0000000002770000-0x0000000002881000-memory.dmp

    Filesize

    1.1MB

  • memory/2468-886-0x0000000002770000-0x0000000002881000-memory.dmp

    Filesize

    1.1MB

  • memory/2468-890-0x0000000002770000-0x0000000002881000-memory.dmp

    Filesize

    1.1MB

  • memory/2468-888-0x0000000002770000-0x0000000002881000-memory.dmp

    Filesize

    1.1MB

  • memory/2468-892-0x0000000002770000-0x0000000002881000-memory.dmp

    Filesize

    1.1MB

  • memory/2468-896-0x0000000002770000-0x0000000002881000-memory.dmp

    Filesize

    1.1MB

  • memory/2468-894-0x0000000002770000-0x0000000002881000-memory.dmp

    Filesize

    1.1MB

  • memory/2468-898-0x0000000002770000-0x0000000002881000-memory.dmp

    Filesize

    1.1MB

  • memory/2468-900-0x0000000002770000-0x0000000002881000-memory.dmp

    Filesize

    1.1MB

  • memory/2468-902-0x0000000002770000-0x0000000002881000-memory.dmp

    Filesize

    1.1MB

  • memory/2468-904-0x0000000002770000-0x0000000002881000-memory.dmp

    Filesize

    1.1MB

  • memory/2468-906-0x0000000002770000-0x0000000002881000-memory.dmp

    Filesize

    1.1MB

  • memory/2468-908-0x0000000002770000-0x0000000002881000-memory.dmp

    Filesize

    1.1MB

  • memory/2468-910-0x0000000002770000-0x0000000002881000-memory.dmp

    Filesize

    1.1MB

  • memory/2468-914-0x0000000002770000-0x0000000002881000-memory.dmp

    Filesize

    1.1MB

  • memory/2468-912-0x0000000002770000-0x0000000002881000-memory.dmp

    Filesize

    1.1MB

  • memory/2468-918-0x0000000002770000-0x0000000002881000-memory.dmp

    Filesize

    1.1MB

  • memory/2468-916-0x0000000002770000-0x0000000002881000-memory.dmp

    Filesize

    1.1MB

  • memory/2468-920-0x0000000002770000-0x0000000002881000-memory.dmp

    Filesize

    1.1MB

  • memory/2468-922-0x0000000002770000-0x0000000002881000-memory.dmp

    Filesize

    1.1MB

  • memory/2468-924-0x0000000002770000-0x0000000002881000-memory.dmp

    Filesize

    1.1MB

  • memory/2468-926-0x0000000002770000-0x0000000002881000-memory.dmp

    Filesize

    1.1MB

  • memory/2468-2601-0x0000000000B50000-0x0000000000C50000-memory.dmp

    Filesize

    1024KB

  • memory/2468-2602-0x00000000025E0000-0x0000000002761000-memory.dmp

    Filesize

    1.5MB

  • memory/2468-4324-0x0000000000B50000-0x0000000000C50000-memory.dmp

    Filesize

    1024KB

  • memory/2468-8742-0x0000000002770000-0x0000000002881000-memory.dmp

    Filesize

    1.1MB

  • memory/2468-8743-0x00000000023E0000-0x00000000024E1000-memory.dmp

    Filesize

    1.0MB

  • memory/2468-8744-0x0000000002510000-0x0000000002550000-memory.dmp

    Filesize

    256KB

  • memory/2468-8745-0x0000000000960000-0x0000000000A01000-memory.dmp

    Filesize

    644KB

  • memory/2468-8748-0x0000000000400000-0x0000000000959000-memory.dmp

    Filesize

    5.3MB