Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
-
submitted
16/10/2023, 10:09 UTC
General
-
Target
3b852fab22668262cddd92b988a5763b3bc9f6b46f5e52295b30f5a3401dfabe.exe
-
Size
6.1MB
-
MD5
8b670a36cec6aad69b38888029139692
-
SHA1
8b0d3539b76bf6066132f8d81b780eb74a22b476
-
SHA256
3b852fab22668262cddd92b988a5763b3bc9f6b46f5e52295b30f5a3401dfabe
-
SHA512
2daf29f9f3fedd4f5fa934eb12cf7c75602cac8f380de25f68aa6d9692c6df3caa1f763ee9e074481d8122a7c1fd0fc003c17727bdfd3b84ffcf82479da172ab
-
SSDEEP
98304:SzZ+JOEBEi2rGSpOTh+7EnH5Tq0mXS2T6mSJBAUZLH:0ADA9Sm0mR3SJV7
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3b852fab22668262cddd92b988a5763b3bc9f6b46f5e52295b30f5a3401dfabe.exe"C:\Users\Admin\AppData\Local\Temp\3b852fab22668262cddd92b988a5763b3bc9f6b46f5e52295b30f5a3401dfabe.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
-
DNSwww.baidu.comRemote address:8.8.8.8:53Requestwww.baidu.comIN AResponsewww.baidu.comIN CNAMEwww.a.shifen.comwww.a.shifen.comIN CNAMEwww.wshifen.comwww.wshifen.comIN A104.193.88.77www.wshifen.comIN A104.193.88.123 -
GEThttp://www.baidu.com/Remote address:104.193.88.77:80RequestGET / HTTP/1.1
User-Agent: test
Host: www.baidu.com
Cache-Control: no-cache
ResponseHTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: no-cache
Connection: keep-alive
Content-Length: 9508
Content-Type: text/html
Date: Mon, 16 Oct 2023 10:10:16 GMT
P3p: CP=" OTI DSP COR IVA OUR IND COM "
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Pragma: no-cache
Server: BWS/1.1
Set-Cookie: BAIDUID=1D82087635D1F3CF103E512D72A2E0CB:FG=1; expires=Thu, 31-Dec-37 23:55:55 GMT; max-age=2147483647; path=/; domain=.baidu.com
Set-Cookie: BIDUPSID=1D82087635D1F3CF103E512D72A2E0CB; expires=Thu, 31-Dec-37 23:55:55 GMT; max-age=2147483647; path=/; domain=.baidu.com
Set-Cookie: PSTM=1697451016; expires=Thu, 31-Dec-37 23:55:55 GMT; max-age=2147483647; path=/; domain=.baidu.com
Set-Cookie: BAIDUID=1D82087635D1F3CF0255714A38E3B62F:FG=1; max-age=31536000; expires=Tue, 15-Oct-24 10:10:16 GMT; domain=.baidu.com; path=/; version=1; comment=bd
Traceid: 169745101606807534185894538455605201439
Vary: Accept-Encoding
X-Ua-Compatible: IE=Edge,chrome=1
-
104.193.88.77:80http://www.baidu.com/http
HTTP Request
GET http://www.baidu.com/HTTP Response
200
-
8.8.8.8:53www.baidu.comdns
DNS Request
www.baidu.com
DNS Response
104.193.88.77104.193.88.123