Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20/08/2023, 21:01

General

  • Target

    85cf4166ebf5e086db4370a39f52a7ba20dd80aef7505ef06c63b2f663aa2de7.exe

  • Size

    285KB

  • MD5

    00959d3406db0ed09502e4b92211cace

  • SHA1

    60c07091574c331481c404913b5070c5ef680404

  • SHA256

    85cf4166ebf5e086db4370a39f52a7ba20dd80aef7505ef06c63b2f663aa2de7

  • SHA512

    13410897ffa0a1857ee65637e53f5d17ecd4d5c6e99ba2432934d1a7f98dfbac79eebe204b669daac9a4debb9963147e9cb33612efda0987eaf49b1b2482ba07

  • SSDEEP

    6144:RRIHTpvHO3aGa3xstFxO6YeHJqpGNdRMdxdNq7rj1gfqH2/H:RWzlHNitLDJdEfqPj1y/H

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\85cf4166ebf5e086db4370a39f52a7ba20dd80aef7505ef06c63b2f663aa2de7.exe
    "C:\Users\Admin\AppData\Local\Temp\85cf4166ebf5e086db4370a39f52a7ba20dd80aef7505ef06c63b2f663aa2de7.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:3816

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3816-133-0x0000000000400000-0x00000000005198FF-memory.dmp

    Filesize

    1.1MB

  • memory/3816-134-0x0000000000400000-0x00000000005198FF-memory.dmp

    Filesize

    1.1MB

  • memory/3816-135-0x0000000000400000-0x00000000005198FF-memory.dmp

    Filesize

    1.1MB

  • memory/3816-137-0x00000000024B0000-0x00000000024FB000-memory.dmp

    Filesize

    300KB

  • memory/3816-138-0x0000000002500000-0x0000000002501000-memory.dmp

    Filesize

    4KB

  • memory/3816-139-0x0000000000400000-0x00000000005198FF-memory.dmp

    Filesize

    1.1MB

  • memory/3816-140-0x0000000002500000-0x0000000002501000-memory.dmp

    Filesize

    4KB