Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

빨간펜.exe

windows7-x64

1

빨간펜.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    141s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    04/10/2023, 07:08

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    빨간펜.exe

  • Size

    258KB

  • MD5

    9ecaa57b13565fb5c99a94cf6d0088de

  • SHA1

    e5f9e45d1050b89e9cadc74a60455f3c4dfe4ff9

  • SHA256

    570c9d08be0d35e319bfa9e00656734ad985eb05e8f99c7ae5156468c9f274e7

  • SHA512

    35a0cf585ee0b02347062cb1c9a4b1e6bd33de4d8884fa173e6cea432ffcddf755a3ceee924d7210232c3869c2c5ec7ffa12a21be44bafb2fe10d50d38bb578b

  • SSDEEP

    6144:QMX+ZwNPbMIFMUJ3IInUchQkFpVgFmH9PV0z2sdP:jOZwbZ3IoGkFpVga9Phsp

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\빨간펜.exe
    "C:\Users\Admin\AppData\Local\Temp\빨간펜.exe"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    PID:2064

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2064-0-0x0000000000400000-0x0000000000420000-memory.dmp

    Filesize

    128KB

    Download