Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

5

Static

static

3

924b79396d...03.exe

windows7-x64

5

924b79396d...03.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    118s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20230712-en
  • resource tags

    arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
  • submitted
    16/08/2023, 10:21

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    924b79396dfc154acf3c5beab5941ea7d3205557f7ef9c86468988e2f0236703.exe

  • Size

    3.7MB

  • MD5

    ae59c75b54112f51bae30569ad82eefc

  • SHA1

    396d80edb2ede7cc937b6a9350fb90c1ccf6273d

  • SHA256

    924b79396dfc154acf3c5beab5941ea7d3205557f7ef9c86468988e2f0236703

  • SHA512

    93ab3d44fb70931434d71fa2782d965be3cdf703b15d2d881185eaa9bd5ee566e2c25e0937fc27e8e1b2d52262378e0c0776a517a887369db6dd87c900d9d97e

  • SSDEEP

    98304:DOswKSUaQiHUl5X1e3imqEPkMFDDKFHp2cJQ5k:SKhFgy5X1KqckoDsAcJN

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 64 IoCs
  • Modifies registry class 7 IoCs
  • Suspicious behavior: EnumeratesProcesses 10 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\924b79396dfc154acf3c5beab5941ea7d3205557f7ef9c86468988e2f0236703.exe
    "C:\Users\Admin\AppData\Local\Temp\924b79396dfc154acf3c5beab5941ea7d3205557f7ef9c86468988e2f0236703.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:2516

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2516-54-0x0000000000240000-0x0000000000269000-memory.dmp

    Filesize

    164KB

    Download

  • memory/2516-55-0x0000000000400000-0x0000000000DAD000-memory.dmp

    Filesize

    9.7MB

    Download

  • memory/2516-57-0x0000000000270000-0x0000000000271000-memory.dmp

    Filesize

    4KB

    Download

  • memory/2516-56-0x0000000000400000-0x0000000000DAD000-memory.dmp

    Filesize

    9.7MB

    Download

  • memory/2516-58-0x0000000000240000-0x0000000000269000-memory.dmp

    Filesize

    164KB

    Download

  • memory/2516-59-0x0000000000400000-0x0000000000DAD000-memory.dmp

    Filesize

    9.7MB

    Download

  • memory/2516-61-0x0000000000400000-0x0000000000DAD000-memory.dmp

    Filesize

    9.7MB

    Download

  • memory/2516-62-0x0000000000400000-0x0000000000DAD000-memory.dmp

    Filesize

    9.7MB

    Download

  • memory/2516-63-0x0000000000400000-0x0000000000DAD000-memory.dmp

    Filesize

    9.7MB

    Download

  • memory/2516-64-0x0000000000400000-0x0000000000DAD000-memory.dmp

    Filesize

    9.7MB

    Download

  • memory/2516-65-0x0000000076700000-0x0000000076747000-memory.dmp

    Filesize

    284KB

    Download

  • memory/2516-875-0x0000000002C70000-0x0000000002D81000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/2516-876-0x0000000002C70000-0x0000000002D81000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/2516-878-0x0000000002C70000-0x0000000002D81000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/2516-880-0x0000000002C70000-0x0000000002D81000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/2516-882-0x0000000002C70000-0x0000000002D81000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/2516-884-0x0000000002C70000-0x0000000002D81000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/2516-886-0x0000000002C70000-0x0000000002D81000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/2516-888-0x0000000002C70000-0x0000000002D81000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/2516-890-0x0000000002C70000-0x0000000002D81000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/2516-892-0x0000000002C70000-0x0000000002D81000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/2516-894-0x0000000002C70000-0x0000000002D81000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/2516-896-0x0000000002C70000-0x0000000002D81000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/2516-902-0x0000000002C70000-0x0000000002D81000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/2516-900-0x0000000002C70000-0x0000000002D81000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/2516-898-0x0000000002C70000-0x0000000002D81000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/2516-906-0x0000000002C70000-0x0000000002D81000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/2516-904-0x0000000002C70000-0x0000000002D81000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/2516-908-0x0000000002C70000-0x0000000002D81000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/2516-914-0x0000000002C70000-0x0000000002D81000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/2516-912-0x0000000002C70000-0x0000000002D81000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/2516-910-0x0000000002C70000-0x0000000002D81000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/2516-920-0x0000000002C70000-0x0000000002D81000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/2516-918-0x0000000002C70000-0x0000000002D81000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/2516-916-0x0000000002C70000-0x0000000002D81000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/2516-930-0x0000000002C70000-0x0000000002D81000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/2516-928-0x0000000002C70000-0x0000000002D81000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/2516-926-0x0000000002C70000-0x0000000002D81000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/2516-924-0x0000000002C70000-0x0000000002D81000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/2516-922-0x0000000002C70000-0x0000000002D81000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/2516-943-0x0000000000400000-0x0000000000DAD000-memory.dmp

    Filesize

    9.7MB

    Download

  • memory/2516-1146-0x0000000000240000-0x0000000000269000-memory.dmp

    Filesize

    164KB

    Download

  • memory/2516-2615-0x0000000002800000-0x0000000002900000-memory.dmp

    Filesize

    1024KB

    Download

  • memory/2516-2616-0x00000000029C0000-0x0000000002B41000-memory.dmp

    Filesize

    1.5MB

    Download

  • memory/2516-4045-0x0000000002800000-0x0000000002900000-memory.dmp

    Filesize

    1024KB

    Download

  • memory/2516-8760-0x0000000002C70000-0x0000000002D81000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/2516-8763-0x0000000002D90000-0x0000000002E91000-memory.dmp

    Filesize

    1.0MB

    Download

  • memory/2516-8764-0x0000000002B50000-0x0000000002BF1000-memory.dmp

    Filesize

    644KB

    Download

  • memory/2516-8769-0x0000000000400000-0x0000000000DAD000-memory.dmp

    Filesize

    9.7MB

    Download

  • memory/2516-8776-0x0000000000400000-0x0000000000DAD000-memory.dmp

    Filesize

    9.7MB

    Download

  • memory/2516-9782-0x0000000000400000-0x0000000000DAD000-memory.dmp

    Filesize

    9.7MB

    Download

  • memory/2516-11326-0x0000000003F60000-0x0000000004060000-memory.dmp

    Filesize

    1024KB

    Download

  • memory/2516-11327-0x0000000004160000-0x00000000042E1000-memory.dmp

    Filesize

    1.5MB

    Download

  • memory/2516-12974-0x0000000003F60000-0x0000000004060000-memory.dmp

    Filesize

    1024KB

    Download

  • memory/2516-17470-0x0000000004410000-0x0000000004521000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/2516-17481-0x0000000000400000-0x0000000000DAD000-memory.dmp

    Filesize

    9.7MB

    Download

  • memory/2516-17482-0x00000000042F0000-0x0000000004391000-memory.dmp

    Filesize

    644KB

    Download

  • memory/2516-17485-0x0000000000400000-0x0000000000DAD000-memory.dmp

    Filesize

    9.7MB

    Download

  • memory/2516-17486-0x0000000004530000-0x0000000004631000-memory.dmp

    Filesize

    1.0MB

    Download

  • memory/2516-17487-0x0000000000240000-0x0000000000269000-memory.dmp

    Filesize

    164KB

    Download

  • memory/2516-17488-0x0000000000400000-0x0000000000DAD000-memory.dmp

    Filesize

    9.7MB

    Download