Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

6

Static

static

1

b590c1a957...f2.exe

windows7-x64

6

b590c1a957...f2.exe

windows10-2004-x64

6

Analysis

  • max time kernel
    120s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20231020-en
  • resource tags

    arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
  • submitted
    21/10/2023, 16:40

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    b590c1a957b9fe79a7dc124a6d5a56d1d76125ad2d3b208523538b4e127625f2.exe

  • Size

    78KB

  • MD5

    c7d471ab15c2cdcfc15d87712a920473

  • SHA1

    0abb7730015f13eab7d924e8b4af07d98105fcda

  • SHA256

    b590c1a957b9fe79a7dc124a6d5a56d1d76125ad2d3b208523538b4e127625f2

  • SHA512

    239c703628f515d8af202398a5c9beab0dcac6a3b031775e34783dc8553ca343ea91b3f7d1fb8c746bbbfe77c2730121f5ea74254eae5f7fdaf07ecbaee9300f

  • SSDEEP

    768:kIRVprW+zK0mV+gK1yfq0y6Ahf33J5EYl0ydMHjfLHQu5kENAMxR:1RVpy55V+6fta5hEHjsu5BxR

Score
6/10
persistence

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 1 IoCs
    persistence
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b590c1a957b9fe79a7dc124a6d5a56d1d76125ad2d3b208523538b4e127625f2.exe
    "C:\Users\Admin\AppData\Local\Temp\b590c1a957b9fe79a7dc124a6d5a56d1d76125ad2d3b208523538b4e127625f2.exe"
    1⤵
    • Adds Run key to start application
    • Suspicious use of SetWindowsHookEx
    PID:2516

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads