Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    138s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    15/08/2023, 09:53

General

  • Target

    f802761f6f5c13d3faed9fda8fa30b7a1e42bc04454a6ef267953d8cd0dcd320.exe

  • Size

    3.2MB

  • MD5

    e82ac09c5861ea183171c70b9332de16

  • SHA1

    5a514790c3ad530911934451718528615650850a

  • SHA256

    f802761f6f5c13d3faed9fda8fa30b7a1e42bc04454a6ef267953d8cd0dcd320

  • SHA512

    e0267343163dfae0df0f6ab7dc641fb4c24a2981d7578af081076c1ea0ff5c12b361c2943d250ffafce153b07a00ec6d28b50a1b54dd3e162038b017321b7a2d

  • SSDEEP

    98304:zZBXN1WIJrGDRRwOU8C4VMy/3gAJ7P5Rms5V:FBXNcW785w4rS8V

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 19 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f802761f6f5c13d3faed9fda8fa30b7a1e42bc04454a6ef267953d8cd0dcd320.exe
    "C:\Users\Admin\AppData\Local\Temp\f802761f6f5c13d3faed9fda8fa30b7a1e42bc04454a6ef267953d8cd0dcd320.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    PID:2284

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2284-133-0x0000000000400000-0x0000000000959000-memory.dmp

    Filesize

    5.3MB

  • memory/2284-134-0x0000000075870000-0x0000000075A85000-memory.dmp

    Filesize

    2.1MB

  • memory/2284-4008-0x00000000752C0000-0x0000000075460000-memory.dmp

    Filesize

    1.6MB

  • memory/2284-6017-0x00000000757F0000-0x000000007586A000-memory.dmp

    Filesize

    488KB

  • memory/2284-13202-0x0000000001010000-0x0000000001110000-memory.dmp

    Filesize

    1024KB

  • memory/2284-13203-0x0000000001010000-0x0000000001110000-memory.dmp

    Filesize

    1024KB

  • memory/2284-13204-0x0000000000400000-0x0000000000959000-memory.dmp

    Filesize

    5.3MB

  • memory/2284-13205-0x0000000000400000-0x0000000000959000-memory.dmp

    Filesize

    5.3MB