Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
142s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
22/09/2023, 04:12
Static task
static1
Behavioral task
behavioral1
Sample
fecbecfe5fe0d7c707242ab2c29f6bf7cbc4b2bb7f362ab68553529207f5402d.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
fecbecfe5fe0d7c707242ab2c29f6bf7cbc4b2bb7f362ab68553529207f5402d.exe
Resource
win10v2004-20230915-en
General
-
Target
fecbecfe5fe0d7c707242ab2c29f6bf7cbc4b2bb7f362ab68553529207f5402d.exe
-
Size
11.9MB
-
MD5
84e733c31200a10e2b762b3e4e23da52
-
SHA1
f093d497fc75e38d49fd47b15968af5834434eb1
-
SHA256
fecbecfe5fe0d7c707242ab2c29f6bf7cbc4b2bb7f362ab68553529207f5402d
-
SHA512
127160bc32ea879a6451c35ad714c36754a285bfe080ca0cc29215464a9d700c1dedeac1e700719107fe79e43d2005fc9215c6eb7f1d49466ca1ef56124610f3
-
SSDEEP
196608:ZTKRH11KIF//Hjg29zfqS4MkxNa5DEpCNpc5ul3sOct5d9bQxED7eTOy35uB+Po4:VKRnDL92NMtDEKCulcOcHFD74OyJuwXX
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1164 fecbecfe5fe0d7c707242ab2c29f6bf7cbc4b2bb7f362ab68553529207f5402d.exe 1164 fecbecfe5fe0d7c707242ab2c29f6bf7cbc4b2bb7f362ab68553529207f5402d.exe 1164 fecbecfe5fe0d7c707242ab2c29f6bf7cbc4b2bb7f362ab68553529207f5402d.exe 1164 fecbecfe5fe0d7c707242ab2c29f6bf7cbc4b2bb7f362ab68553529207f5402d.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD5275d5484538a5d7fb99b90787a6f1986
SHA15f641f77fbae9b4f42e74926414e3972e4ad26ac
SHA2563858e65a7c980e512c0654e3b66b0faaeeb3d7f25e03e5bc6886c8a7101aa98f
SHA51247e008921fc4c41812c4a6761fe60d8e2e756b816ad74d0d33d45967c0a3845e105074a132d60bf8e6b337871d0fc8a32ccf0f1d4aac65b125edb408342194dd
-
Filesize
1KB
MD5c5362bc1b354b5e8efdefcfa74515b55
SHA19d5e304b935bc94d7a117a0eadb6f87cc00f7fac
SHA25663d463e6c071b0fcf46d4814192119f9c540c4757e24c1455b994ec473f58dab
SHA512966ffa1b880cabc4e42c4c8ec46709de8705631fc7d3329c2986c2a7a096fd69f916d71a1c42a605b1f5c14ee74ba953c0e85e203620ae34ee64e96cb9c2722d
-
C:\Users\Admin\AppData\Local\Temp\fecbecfe5fe0d7c707242ab2c29f6bf7cbc4b2bb7f362ab68553529207f5402d.exepack.tmp
Filesize2KB
MD5ec164874441b3b9a250913470c199bd3
SHA1c2c6bd6cd1572852067e0cb38e1956b3d5c347e7
SHA2561ecb8120db92d4c59b419317eb5c295103322aeb50bfc04ae874e8adee4d84cb
SHA512e569c25aae27973924527ffdaebd78a7e731817d6cef71f6d74ca04efcd5f60cacc8c60f3937098a93365b86093b8da94ac8cf838979e3b76f710b0261fd35bf