Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    141s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    07/10/2023, 06:59

General

  • Target

    34451564867fecb7205bf8fa5abb2fb3f4c2a9a2db60b89a83357430e4ed8e47.exe

  • Size

    10.6MB

  • MD5

    08a94901a1cb1f748a94842a20acefd5

  • SHA1

    06b9d1db117246feee5ee90ede4eb64e92d6ce2a

  • SHA256

    34451564867fecb7205bf8fa5abb2fb3f4c2a9a2db60b89a83357430e4ed8e47

  • SHA512

    c9a8264738cd7fcf91955f039ff25417dd1415beb5bfb55d64c8254377b2c0815244c08868ebef0c490b6065514b9f4b54ea4dc8c1b6ab440d9cd6d0ee76c77f

  • SSDEEP

    196608:ZTKRH11KIF//Hjg29zfqSu1+m9YpFv6Dxk+lGyKzM0jWHImRATAhrXRKLcEAx+K3:VKRnDL925c/0+yaWHIcA8rhKLcEAxz3

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\34451564867fecb7205bf8fa5abb2fb3f4c2a9a2db60b89a83357430e4ed8e47.exe
    "C:\Users\Admin\AppData\Local\Temp\34451564867fecb7205bf8fa5abb2fb3f4c2a9a2db60b89a83357430e4ed8e47.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1980

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\34451564867fecb7205bf8fa5abb2fb3f4c2a9a2db60b89a83357430e4ed8e47.exepack.tmp

    Filesize

    2KB

    MD5

    d37a78a01c1b1937579f41505dda8251

    SHA1

    b9e1fed4c96e3433eecd2d8e8e2ab915883f7750

    SHA256

    1e8ece7cf45da9fb3a877f13b529fae6b34f5e71ef6639b782e5295e7387c035

    SHA512

    159a582acb022b6e731842f8e987fe646d4bf84a7296605f6cf105977ff4b469ba6d2467f534d3047b5c41b632151bb0eb1db55b3d8185fa7e57c8f929a0e30c

  • C:\Users\Admin\AppData\Local\Temp\4c25117fcf8adab0e2f9ae8dcb41efc4.ini

    Filesize

    1KB

    MD5

    592726a3b0afa3566f3fce883297dfe3

    SHA1

    d9104de998d8645c183674ec8def1ac5000c620e

    SHA256

    5847696887b1ad6bc6b9f8060fe68b6bfebab992c9437edb5387eaabf66be435

    SHA512

    c21bd9a09e0d746bfd97eaa24815d92b43525fb7c9ba4dc7f5a81761cec295a7a28addcba46acf31dfb483f49e78cf5aa57fde02d18593f7990fb0fa1af1c588

  • C:\Users\Admin\AppData\Local\Temp\4c25117fcf8adab0e2f9ae8dcb41efc4A.ini

    Filesize

    1KB

    MD5

    42298c2526919409b7fe0cd4e121615e

    SHA1

    7c9261e79138950760a10db5c4c2433390a4ee90

    SHA256

    4b7081cf16286b0abec05a9096f02dd49a3d614a71791509086ed28c7f7c26f2

    SHA512

    70903903460a89cb8e7340b3d06a9aa9ff884eb3afb2aff17a9a5c598480a75921cd48f8658159e2a79e06f1f5482cc9dc7a88554a974bc3feb7b0d96a1a7798

  • memory/1980-332-0x0000000000400000-0x0000000001CF0000-memory.dmp

    Filesize

    24.9MB

  • memory/1980-334-0x0000000000400000-0x0000000001CF0000-memory.dmp

    Filesize

    24.9MB

  • memory/1980-1-0x0000000000250000-0x0000000000253000-memory.dmp

    Filesize

    12KB

  • memory/1980-328-0x0000000000400000-0x0000000001CF0000-memory.dmp

    Filesize

    24.9MB

  • memory/1980-329-0x0000000000250000-0x0000000000253000-memory.dmp

    Filesize

    12KB

  • memory/1980-330-0x0000000000400000-0x0000000001CF0000-memory.dmp

    Filesize

    24.9MB

  • memory/1980-331-0x0000000000400000-0x0000000001CF0000-memory.dmp

    Filesize

    24.9MB

  • memory/1980-0-0x0000000000400000-0x0000000001CF0000-memory.dmp

    Filesize

    24.9MB

  • memory/1980-333-0x0000000000400000-0x0000000001CF0000-memory.dmp

    Filesize

    24.9MB

  • memory/1980-2-0x0000000000400000-0x0000000001CF0000-memory.dmp

    Filesize

    24.9MB

  • memory/1980-335-0x0000000000400000-0x0000000001CF0000-memory.dmp

    Filesize

    24.9MB

  • memory/1980-336-0x0000000000400000-0x0000000001CF0000-memory.dmp

    Filesize

    24.9MB

  • memory/1980-337-0x0000000000400000-0x0000000001CF0000-memory.dmp

    Filesize

    24.9MB

  • memory/1980-338-0x0000000000400000-0x0000000001CF0000-memory.dmp

    Filesize

    24.9MB

  • memory/1980-339-0x0000000000400000-0x0000000001CF0000-memory.dmp

    Filesize

    24.9MB

  • memory/1980-340-0x0000000000400000-0x0000000001CF0000-memory.dmp

    Filesize

    24.9MB

  • memory/1980-341-0x0000000000400000-0x0000000001CF0000-memory.dmp

    Filesize

    24.9MB

  • memory/1980-342-0x0000000000400000-0x0000000001CF0000-memory.dmp

    Filesize

    24.9MB

  • memory/1980-343-0x0000000000400000-0x0000000001CF0000-memory.dmp

    Filesize

    24.9MB