Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    204s
  • max time network
    214s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12/10/2023, 17:11

General

  • Target

    0abfebf8a9013f849dec9c4ca825a73fe5abed296b76e3f26e44aceacd942f6c.exe

  • Size

    12.8MB

  • MD5

    041edc3645288607abd830f7e8d83b73

  • SHA1

    f41c6998406c668be5111e3cb1de2ad220b44df2

  • SHA256

    0abfebf8a9013f849dec9c4ca825a73fe5abed296b76e3f26e44aceacd942f6c

  • SHA512

    1beeada204bf99481b79568b8b34f5d9d4a97af5eac0474aa2f77a736a513b46e016822b6bfaf5d73eace8175b56bd2f6f961e8a94454db033863ebba0d9b599

  • SSDEEP

    24576:LAejVhWq+pT5fyd6NgoQBlEZaaYTNWwV0YGr3tBJLOqmu3yVV2ieoCQy1DfHGrXD:Loq+hVZEYRYybJLOqmu3sgYy1r

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0abfebf8a9013f849dec9c4ca825a73fe5abed296b76e3f26e44aceacd942f6c.exe
    "C:\Users\Admin\AppData\Local\Temp\0abfebf8a9013f849dec9c4ca825a73fe5abed296b76e3f26e44aceacd942f6c.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1764

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1764-1-0x0000000010000000-0x0000000010018000-memory.dmp

    Filesize

    96KB

  • memory/1764-3-0x00000000759F0000-0x0000000075AE0000-memory.dmp

    Filesize

    960KB

  • memory/1764-4-0x00000000759F0000-0x0000000075AE0000-memory.dmp

    Filesize

    960KB

  • memory/1764-5-0x0000000010000000-0x0000000010018000-memory.dmp

    Filesize

    96KB

  • memory/1764-6-0x00000000759F0000-0x0000000075AE0000-memory.dmp

    Filesize

    960KB