Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
175s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
12/10/2023, 06:00
General
-
Target
3ddf883cade1ba8aeec4eb9d50d9e1bbc5c3afd297903bd2f52736862911ba01.exe
-
Size
5.5MB
-
MD5
b747c98026c873a0734c806da693bfe0
-
SHA1
d559b5697d1e806944f29c325bd64a8b00e456c0
-
SHA256
3ddf883cade1ba8aeec4eb9d50d9e1bbc5c3afd297903bd2f52736862911ba01
-
SHA512
741bd320cfc0af75866c52d74551e43d4ebb84b7b8c40452b3d8552bb1994418af0cd7b71a434f531c3b97d1e8ec58c8dce300f811d2edfe0da69911e9ba27ba
-
SSDEEP
98304:Sizxm89TaQxKxAY1lqiBHDDfDDTy5y1fafGXReiqmNhfB48pxm2e:DsHNzLyo+GXRnqm7Bdxi
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Suspicious use of SetWindowsHookEx 5 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3ddf883cade1ba8aeec4eb9d50d9e1bbc5c3afd297903bd2f52736862911ba01.exe"C:\Users\Admin\AppData\Local\Temp\3ddf883cade1ba8aeec4eb9d50d9e1bbc5c3afd297903bd2f52736862911ba01.exe"1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\update.exeC:\Users\Admin\AppData\Local\Temp\update.exe2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
840KB
MD5497994dd312d8e97c2e19769daa69320
SHA1d59d842a5462d743a3aa168d05d7997d4cd313c4
SHA2560f290ee9a2e500900270b9b2f1b4a5f05e1e1a4c694fdb1b166a528fd1860657
SHA512968fea49288d0eea91490b1165b9543152b90883042a1423b74c22cc7c62e090ac108a3ad5c1fc62884c4a99cee68ecb5a9b442f1fc518f375924111602b96b7
-
Filesize
840KB
MD5497994dd312d8e97c2e19769daa69320
SHA1d59d842a5462d743a3aa168d05d7997d4cd313c4
SHA2560f290ee9a2e500900270b9b2f1b4a5f05e1e1a4c694fdb1b166a528fd1860657
SHA512968fea49288d0eea91490b1165b9543152b90883042a1423b74c22cc7c62e090ac108a3ad5c1fc62884c4a99cee68ecb5a9b442f1fc518f375924111602b96b7