Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    144s
  • max time network
    146s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    24/09/2023, 00:05

General

  • Target

    11ad47d5017fdc1c36277116d4e7ff58e54ecec3f4d45eb18ee5fc2c53d4e862.exe

  • Size

    1.4MB

  • MD5

    1b90a6d258272d9739ddcba2b7c263fb

  • SHA1

    6ea9357b26b59df7a662cceb053aa3e53765721b

  • SHA256

    11ad47d5017fdc1c36277116d4e7ff58e54ecec3f4d45eb18ee5fc2c53d4e862

  • SHA512

    e09247d2655d8122b70908cf56f1622efcb0fd33c3c22f05ef722d08367f5a7c7e834e7dc915c14296de24918b86f3b00b30ff7e58afd1c7fe1651b7739734c8

  • SSDEEP

    24576:CO/3+0DCvcDPkHqgFjBSfEqt0iIApt5bhT+Y:CED8qg1rqtxz5F9

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 25 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Modifies system certificate store 2 TTPs 2 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\11ad47d5017fdc1c36277116d4e7ff58e54ecec3f4d45eb18ee5fc2c53d4e862.exe
    "C:\Users\Admin\AppData\Local\Temp\11ad47d5017fdc1c36277116d4e7ff58e54ecec3f4d45eb18ee5fc2c53d4e862.exe"
    1⤵
    • Modifies system certificate store
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1676

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1676-17-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1676-18-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1676-19-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1676-16-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1676-21-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1676-23-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1676-25-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1676-27-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1676-29-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1676-31-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1676-33-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1676-35-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1676-37-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1676-39-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1676-41-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1676-43-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1676-45-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1676-47-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1676-49-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1676-51-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1676-53-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1676-55-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1676-57-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1676-59-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/1676-60-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB