Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    12/10/2023, 15:46

General

  • Target

    90cfca607366d4e6e52ac838fc5e3f3d26d91f5f997e10f69f6bdab65f6e98f8.exe

  • Size

    307KB

  • MD5

    40fb25b97eed1ea5f6881b0577ee486e

  • SHA1

    07f7310f7cc605b6ea1699b19ddef4478f867cad

  • SHA256

    90cfca607366d4e6e52ac838fc5e3f3d26d91f5f997e10f69f6bdab65f6e98f8

  • SHA512

    689c745e5a26200a9efeb086fa8360baf7eab8f58e4f94c67ccba01446ca7855f0624bfa44595e3706701224afe56644255561a0a184fd7a5d93a4d16496f21f

  • SSDEEP

    6144:HphoeNEnaI5268QyHU6FDOQSMjhodwImZQp4C8VeX2uiDHRcx3W0+PNgi26aQ:J1ET5268QyHU6YVsVZy4CbXsyxDEWr6f

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: RenamesItself 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\90cfca607366d4e6e52ac838fc5e3f3d26d91f5f997e10f69f6bdab65f6e98f8.exe
    "C:\Users\Admin\AppData\Local\Temp\90cfca607366d4e6e52ac838fc5e3f3d26d91f5f997e10f69f6bdab65f6e98f8.exe"
    1⤵
    • Suspicious behavior: RenamesItself
    • Suspicious use of SetWindowsHookEx
    PID:2112

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2112-0-0x0000000000400000-0x000000000053D000-memory.dmp

    Filesize

    1.2MB

  • memory/2112-2-0x0000000000400000-0x000000000053D000-memory.dmp

    Filesize

    1.2MB

  • memory/2112-1-0x0000000000230000-0x0000000000231000-memory.dmp

    Filesize

    4KB

  • memory/2112-4-0x0000000000400000-0x000000000053D000-memory.dmp

    Filesize

    1.2MB