Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
140s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
-
submitted
22/10/2023, 12:36
General
-
Target
e9f5716b636e4eb607d09da38915f4a22cbb4a0a8db4add4f19979121d618176.exe
-
Size
14.3MB
-
MD5
ef5937cb476066ddc182be91b7ebd6eb
-
SHA1
1acdd03e77d96140b3ad7d8ac65d0acd4687e49e
-
SHA256
e9f5716b636e4eb607d09da38915f4a22cbb4a0a8db4add4f19979121d618176
-
SHA512
d9691322d9494fbf04f48868c236ab4ea48ebb87d937b582399b4a98dbd12418c2dfef8795452f22dbc59a07aa5ccccb4f72e7c388a0b6e4d7e147299b571acf
-
SSDEEP
196608:aHzjrnOnuyS8Tc6brVsj7ZGetXRioEcSSjWxCk4QWWPJ2efTw4LP8ZF0yJKMqPGZ:0GuX6brVcbXEFSjWxp489fwf0W/
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\e9f5716b636e4eb607d09da38915f4a22cbb4a0a8db4add4f19979121d618176.exe"C:\Users\Admin\AppData\Local\Temp\e9f5716b636e4eb607d09da38915f4a22cbb4a0a8db4add4f19979121d618176.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
25.3MB
-
Filesize
25.3MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
25.3MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB