Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

1

Static

static

1

146d47c916...d4.exe

windows7-x64

1

146d47c916...d4.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    193s
  • max time network
    242s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/10/2023, 16:08

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    146d47c91668e5ccf0d88f1bf1c30292fc9a2d5234b06361fd071e4ceb9854d4.exe

  • Size

    1.3MB

  • MD5

    58dbc86283167f6dd6c761aeff940e4b

  • SHA1

    662f96618f5a54201c36b0bad8947d0b0e95adf4

  • SHA256

    146d47c91668e5ccf0d88f1bf1c30292fc9a2d5234b06361fd071e4ceb9854d4

  • SHA512

    1c191a152ecfb78411849a850cc33b813528719ee94b81e724be590d7b6c2b7daeb0f79b612fb79774e582da58191c8d45070162df5e0f937e1b2be4b872fe65

  • SSDEEP

    24576:X0hzpOR8uLEaZylSfnjEoGV4OiV+5vox8z/rhPV5VGy:Xgo2iV8QWz/VPVT

Score
1/10

Malware Config

Signatures

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious use of FindShellTrayWindow 2 IoCs
  • Suspicious use of SendNotifyMessage 2 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\146d47c91668e5ccf0d88f1bf1c30292fc9a2d5234b06361fd071e4ceb9854d4.exe
    "C:\Users\Admin\AppData\Local\Temp\146d47c91668e5ccf0d88f1bf1c30292fc9a2d5234b06361fd071e4ceb9854d4.exe"
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:4512

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\Jnns.Config
    Filesize

    1KB

    MD5

    3c3ff13d9b89b00ac73bc76bccd39e9a

    SHA1

    62a52b99813ed9365261030abaffad7500df80f9

    SHA256

    2cba444138b69292a1c2fb87c2e11fcdb5364c1ba13afa031f879bd58bbff26b

    SHA512

    7351c1ff651390e4bce49c10c91acc20996b43d0d3f6ebfad358381095a211c139c04a708a7f573d1681d10806cb794b4a5e21013c173b1aec0ce3cd2f408f4b

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\Jnns.Config
    Filesize

    2KB

    MD5

    52d217fc9d3fc19f9d35c709bfa030b6

    SHA1

    21c8c6b7a50ac9a162dc8e08c7f7531ee943cf95

    SHA256

    fcee01144587f605929c07aab6497c21cbf86b60d66b5271dae8217528f7bc9a

    SHA512

    329a2a6ada86f98400cb98a2109cd792d0ee0c4842f175a27d49c71eed2cd93bbc623dde3b020f1b5046754d84bbe1bc470b83ec858fb1bac69b8a5a6e67c293

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\Jnns.Config
    Filesize

    1KB

    MD5

    3c3ff13d9b89b00ac73bc76bccd39e9a

    SHA1

    62a52b99813ed9365261030abaffad7500df80f9

    SHA256

    2cba444138b69292a1c2fb87c2e11fcdb5364c1ba13afa031f879bd58bbff26b

    SHA512

    7351c1ff651390e4bce49c10c91acc20996b43d0d3f6ebfad358381095a211c139c04a708a7f573d1681d10806cb794b4a5e21013c173b1aec0ce3cd2f408f4b

    Download Submit