Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    142s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    31/08/2023, 01:46

General

  • Target

    f8063fd5aa2f72dc85880a5fd41c65a0d2d0645acf14b77af01e1246b21c9da3.exe

  • Size

    676KB

  • MD5

    b07307bccc1a334677195addc98b3796

  • SHA1

    4ae54c911c6b1d2d84d675691f8e9944976ffae4

  • SHA256

    f8063fd5aa2f72dc85880a5fd41c65a0d2d0645acf14b77af01e1246b21c9da3

  • SHA512

    d824ebe43b030ec8227eb44daa49747adb65deb85d1cb021a78b91f2da66f28bde1b1c1c90d27ffb7d6cd93166e7a3616632f7f317d77cdd85f5206e7f073065

  • SSDEEP

    12288:ItEr6cXA+dW1hTUIEwniOME1QewBFyYiHT/BYS0ADwfwUS4+JZ5R:Ii+cLY1xRdiLIY4DtNmpSZL

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f8063fd5aa2f72dc85880a5fd41c65a0d2d0645acf14b77af01e1246b21c9da3.exe
    "C:\Users\Admin\AppData\Local\Temp\f8063fd5aa2f72dc85880a5fd41c65a0d2d0645acf14b77af01e1246b21c9da3.exe"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    PID:1216

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1216-0-0x0000000002240000-0x0000000002241000-memory.dmp

    Filesize

    4KB

  • memory/1216-1-0x0000000000400000-0x00000000004B0000-memory.dmp

    Filesize

    704KB

  • memory/1216-2-0x0000000002240000-0x0000000002241000-memory.dmp

    Filesize

    4KB