Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

703faa9f65...1a.exe

windows7-x64

7

703faa9f65...1a.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    142s
  • max time network
    148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25/08/2023, 01:35

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    703faa9f657a787dd01bf39ec87d57faa575571222b46cc020e2c5242c85731a.exe

  • Size

    2.2MB

  • MD5

    f5e79be0233533c7dd1489cdc2d58560

  • SHA1

    8d5778b92e94a4a2deb6f699cbca173be8dc833a

  • SHA256

    703faa9f657a787dd01bf39ec87d57faa575571222b46cc020e2c5242c85731a

  • SHA512

    208f08cc76fb130f52f120c74d44036d4ec15eb97021d5a9b9a624d1c9496fa0145dc2880463401c856efc88462b38667cfbc847072a036168578a38811b0b1b

  • SSDEEP

    24576:WwUhGIZ9Z44vHzSul4SD6q13dlteMMgph6k1Xtu4KDU9ugtJJHnySb0GVzv0o1Oe:Wa4DFt7hb0G2e8lhm23aZjoE

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Suspicious behavior: RenamesItself 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\703faa9f657a787dd01bf39ec87d57faa575571222b46cc020e2c5242c85731a.exe
    "C:\Users\Admin\AppData\Local\Temp\703faa9f657a787dd01bf39ec87d57faa575571222b46cc020e2c5242c85731a.exe"
    1⤵
    • Suspicious behavior: RenamesItself
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3316
    • C:\Users\Admin\AppData\Local\Temp\703faa9f657a787dd01bf39ec87d57faa575571222b46cc020e2c5242c85731a.exe
      C:\Users\Admin\AppData\Local\Temp\703faa9f657a787dd01bf39ec87d57faa575571222b46cc020e2c5242c85731a.exe --
      2⤵
      • Executes dropped EXE
      • Suspicious use of SetWindowsHookEx
      PID:3228

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\703faa9f657a787dd01bf39ec87d57faa575571222b46cc020e2c5242c85731a.exe
    Filesize

    2.2MB

    MD5

    8a2ea68d60b5f8eddb3c807996951ce3

    SHA1

    b5fc8143910d99f2862a04eee2c134256d141006

    SHA256

    0d411380bceb0da7b0f4fc74425edf70d37fce9c4e13eb624d2bf770ee79c158

    SHA512

    5887fcec12420f4ff4090a99d7fb0ae2b978f17b5352788995518d294be253a02625d9283550e6f998b70c6aee15d675f72f5e710fcefb522c27b6929eb07092

    Download Submit

  • memory/3316-3-0x0000000000400000-0x000000000067A000-memory.dmp

    Filesize

    2.5MB

    Download