Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20230712-en
  • resource tags

    arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
  • submitted
    17/08/2023, 09:34

General

  • Target

    db8c25849c9d5f93db349ef7ffe376e6e14b5d2b6a0306d803650852b0fb622e.exe

  • Size

    1.7MB

  • MD5

    76b4b3476df2ef40a1704bc65427af60

  • SHA1

    03c938e80aa1297e801e334e3f70ff0affa10470

  • SHA256

    db8c25849c9d5f93db349ef7ffe376e6e14b5d2b6a0306d803650852b0fb622e

  • SHA512

    8ab4ad96fed345e534b56a8ffd707941b2f2b71d8f27f0cdf2a02408d09268e94efd29da2c4e9d91d20e0d7818344410100142cd885265a9fa1d4510e687fa3c

  • SSDEEP

    49152:KGwDpUTPBAgNbLm47fH9WrNQZaJFw/6KDdN3U66c:KGGUl5m47fdbEw/6+K6x

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 6 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of NtSetInformationThreadHideFromDebugger 29 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\db8c25849c9d5f93db349ef7ffe376e6e14b5d2b6a0306d803650852b0fb622e.exe
    "C:\Users\Admin\AppData\Local\Temp\db8c25849c9d5f93db349ef7ffe376e6e14b5d2b6a0306d803650852b0fb622e.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • Suspicious use of SetWindowsHookEx
    PID:2780

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2780-54-0x0000000000400000-0x000000000065B000-memory.dmp

    Filesize

    2.4MB

  • memory/2780-55-0x0000000077300000-0x0000000077347000-memory.dmp

    Filesize

    284KB

  • memory/2780-868-0x00000000023F0000-0x0000000002501000-memory.dmp

    Filesize

    1.1MB

  • memory/2780-870-0x00000000023F0000-0x0000000002501000-memory.dmp

    Filesize

    1.1MB

  • memory/2780-866-0x00000000023F0000-0x0000000002501000-memory.dmp

    Filesize

    1.1MB

  • memory/2780-865-0x00000000023F0000-0x0000000002501000-memory.dmp

    Filesize

    1.1MB

  • memory/2780-876-0x00000000023F0000-0x0000000002501000-memory.dmp

    Filesize

    1.1MB

  • memory/2780-874-0x00000000023F0000-0x0000000002501000-memory.dmp

    Filesize

    1.1MB

  • memory/2780-872-0x00000000023F0000-0x0000000002501000-memory.dmp

    Filesize

    1.1MB

  • memory/2780-878-0x00000000023F0000-0x0000000002501000-memory.dmp

    Filesize

    1.1MB

  • memory/2780-880-0x00000000023F0000-0x0000000002501000-memory.dmp

    Filesize

    1.1MB

  • memory/2780-882-0x00000000023F0000-0x0000000002501000-memory.dmp

    Filesize

    1.1MB

  • memory/2780-884-0x00000000023F0000-0x0000000002501000-memory.dmp

    Filesize

    1.1MB

  • memory/2780-886-0x00000000023F0000-0x0000000002501000-memory.dmp

    Filesize

    1.1MB

  • memory/2780-888-0x00000000023F0000-0x0000000002501000-memory.dmp

    Filesize

    1.1MB

  • memory/2780-892-0x00000000023F0000-0x0000000002501000-memory.dmp

    Filesize

    1.1MB

  • memory/2780-890-0x00000000023F0000-0x0000000002501000-memory.dmp

    Filesize

    1.1MB

  • memory/2780-896-0x00000000023F0000-0x0000000002501000-memory.dmp

    Filesize

    1.1MB

  • memory/2780-894-0x00000000023F0000-0x0000000002501000-memory.dmp

    Filesize

    1.1MB

  • memory/2780-900-0x00000000023F0000-0x0000000002501000-memory.dmp

    Filesize

    1.1MB

  • memory/2780-898-0x00000000023F0000-0x0000000002501000-memory.dmp

    Filesize

    1.1MB

  • memory/2780-904-0x00000000023F0000-0x0000000002501000-memory.dmp

    Filesize

    1.1MB

  • memory/2780-902-0x00000000023F0000-0x0000000002501000-memory.dmp

    Filesize

    1.1MB

  • memory/2780-906-0x00000000023F0000-0x0000000002501000-memory.dmp

    Filesize

    1.1MB

  • memory/2780-908-0x00000000023F0000-0x0000000002501000-memory.dmp

    Filesize

    1.1MB

  • memory/2780-912-0x00000000023F0000-0x0000000002501000-memory.dmp

    Filesize

    1.1MB

  • memory/2780-914-0x00000000023F0000-0x0000000002501000-memory.dmp

    Filesize

    1.1MB

  • memory/2780-910-0x00000000023F0000-0x0000000002501000-memory.dmp

    Filesize

    1.1MB

  • memory/2780-918-0x00000000023F0000-0x0000000002501000-memory.dmp

    Filesize

    1.1MB

  • memory/2780-916-0x00000000023F0000-0x0000000002501000-memory.dmp

    Filesize

    1.1MB

  • memory/2780-920-0x00000000023F0000-0x0000000002501000-memory.dmp

    Filesize

    1.1MB

  • memory/2780-922-0x00000000023F0000-0x0000000002501000-memory.dmp

    Filesize

    1.1MB

  • memory/2780-924-0x00000000023F0000-0x0000000002501000-memory.dmp

    Filesize

    1.1MB

  • memory/2780-926-0x00000000023F0000-0x0000000002501000-memory.dmp

    Filesize

    1.1MB

  • memory/2780-2601-0x0000000001F40000-0x0000000002040000-memory.dmp

    Filesize

    1024KB

  • memory/2780-2602-0x0000000002260000-0x00000000023E1000-memory.dmp

    Filesize

    1.5MB

  • memory/2780-4377-0x0000000001F40000-0x0000000002040000-memory.dmp

    Filesize

    1024KB

  • memory/2780-8742-0x00000000023F0000-0x0000000002501000-memory.dmp

    Filesize

    1.1MB

  • memory/2780-8749-0x0000000000400000-0x000000000065B000-memory.dmp

    Filesize

    2.4MB

  • memory/2780-8750-0x0000000002120000-0x0000000002221000-memory.dmp

    Filesize

    1.0MB

  • memory/2780-8753-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2780-8759-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2780-8762-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2780-8765-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2780-8781-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2780-8802-0x0000000000400000-0x000000000065B000-memory.dmp

    Filesize

    2.4MB

  • memory/2780-8803-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2780-8807-0x0000000000400000-0x000000000065B000-memory.dmp

    Filesize

    2.4MB