Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
142s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
-
submitted
21/10/2023, 13:42
General
-
Target
aa853c7f13c50776792e79170e82e63e0220e75bc9317112dcdd4d227bb7fa03.exe
-
Size
9.3MB
-
MD5
642fa7d181dee0de8959ad2f6a7ca3c1
-
SHA1
3424b9af74011ab0fe9204c591deb0030fd2ecef
-
SHA256
aa853c7f13c50776792e79170e82e63e0220e75bc9317112dcdd4d227bb7fa03
-
SHA512
d18ca5177a35fb14a4ef9df5d57579a4d948264a7e8f379106784d7def2d876fd0150801a072322e6bc9e8ca8fe633b26701b91051899b3be41fe160dc822b80
-
SSDEEP
196608:Z8wK+MEb/X7wwkyRJVQgWSaele86HA3h5A:F9RZWSaele86HU5A
Score
7/10
Malware Config
Signatures
-
UPX packed file 26 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\aa853c7f13c50776792e79170e82e63e0220e75bc9317112dcdd4d227bb7fa03.exe"C:\Users\Admin\AppData\Local\Temp\aa853c7f13c50776792e79170e82e63e0220e75bc9317112dcdd4d227bb7fa03.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
4KB
-
Filesize
248KB