Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
11/10/2023, 05:27
Static task
static1
Behavioral task
behavioral1
Sample
a758d858c7c169cb44934c30f0aac54df87d54150656f7a029fa927d66d82d55.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
a758d858c7c169cb44934c30f0aac54df87d54150656f7a029fa927d66d82d55.exe
Resource
win10v2004-20230915-en
General
-
Target
a758d858c7c169cb44934c30f0aac54df87d54150656f7a029fa927d66d82d55.exe
-
Size
4.6MB
-
MD5
83f80683ad5861f91ee9153302463c89
-
SHA1
0d1cb5700bd1ce32a2269f152bcb3548a7a9cdca
-
SHA256
a758d858c7c169cb44934c30f0aac54df87d54150656f7a029fa927d66d82d55
-
SHA512
9db7b107f49fd33e1cf6522d0ee59ed4fc51b00f321f9f8749755496400bd2e1570c2dd1777d7351e8d8e506732019ea002613a14e41a4f415cf1c9acf279597
-
SSDEEP
98304:WG1c5g+Wm3n0tQLCcvITqy9KdzOJDb4v+:KgALCoITqzwN0v+
Malware Config
Signatures
-
Downloads MZ/PE file
-
Loads dropped DLL 2 IoCs
pid Process 2416 a758d858c7c169cb44934c30f0aac54df87d54150656f7a029fa927d66d82d55.exe 2416 a758d858c7c169cb44934c30f0aac54df87d54150656f7a029fa927d66d82d55.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2416 a758d858c7c169cb44934c30f0aac54df87d54150656f7a029fa927d66d82d55.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2416 a758d858c7c169cb44934c30f0aac54df87d54150656f7a029fa927d66d82d55.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\a758d858c7c169cb44934c30f0aac54df87d54150656f7a029fa927d66d82d55.exe"C:\Users\Admin\AppData\Local\Temp\a758d858c7c169cb44934c30f0aac54df87d54150656f7a029fa927d66d82d55.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2416
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD50aa61aa59cf7b9e31d1be2f260475eaa
SHA1e609eb61256f90ff6657d98279bee262745e53f6
SHA256fe495d662ba722ec1597174a5723d5200f53c2c5fe6685157827c4a3813ec26d
SHA5125e0fe89ba22bf0de7aeaea4784d669e9b2c68742dd429e7831725cb454201bd15031c535d573be822ddb59f99cd4323936aacbb0486eb43b937acdcfbd00268a
-
Filesize
3KB
MD5cb534192166c13fe70e242a9cacba534
SHA1353410e30f47d2a7a9349df2880d4da43f5fabc0
SHA256974a090fab571cce3abf391e36ff8ab5ae053c89814bb422eeaf5f02cc4cfc5b
SHA512775643f2177d5d89dbd3e10d4236a2ae9abd5491b4cad55fd4173aa729b85beb9965088d234793cf38a781fceef8ec59cc493438b8fbed5a5dd00c065f0750d0
-
Filesize
8KB
MD5d1626f6c2f617d96802294c9dbf5e18d
SHA1a2b0f5589651d71c2e741f695938b0ed34eae5d8
SHA2562c9fbdd71f635076931a0851a49b68d8e37ef53d24de3cc54d4b8a3c0542b434
SHA512df57a8d630265fc6645773b35d188fc2397e5e404664cce16d9fa2392c22920337b7eab64810be416a29c78fb9215a04bcb72199883d8ec3038f16b994eca65a
-
Filesize
38B
MD552a5750a6c8b2c5d772e5b86abe045a5
SHA151a34c0ac78d69d3ca30d41fc1daefe48958b7a0
SHA256ab7fe5545e5844a6ed597593c61ef54953277caca06c72d339f09f4b387b25d3
SHA512ca3172aa03711384b9a4d79319c05850af96b7360c0fd60ae7b31c53c3f7c3450c6f69f97d225d6dc5dded0ba8f7c99ce00b5ca578b55b49491b45f3756f2ffd
-
Filesize
140.4MB
MD54cb143fdad968165c2dbe48ba8950bb1
SHA1cb0faa0650fba759a596663382cc6692dd8a727a
SHA2564daab0bcf0af280b939c6b52df6d7b98bdad5d062b65fc4318e44f948f43103c
SHA512a6613467737f9ad3a554a97e71053451eac5ba966550708b77b4b1ae1a0c1aab1845ff94563701a1ff1cad27cfef59d8f733838871d139c4599ae72a104ea821
-
Filesize
140.4MB
MD54cb143fdad968165c2dbe48ba8950bb1
SHA1cb0faa0650fba759a596663382cc6692dd8a727a
SHA2564daab0bcf0af280b939c6b52df6d7b98bdad5d062b65fc4318e44f948f43103c
SHA512a6613467737f9ad3a554a97e71053451eac5ba966550708b77b4b1ae1a0c1aab1845ff94563701a1ff1cad27cfef59d8f733838871d139c4599ae72a104ea821