Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    136s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231020-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28/10/2023, 20:12

General

  • Target

    NEAS.c1433a95d3838bb9902a3507ef241c50.exe

  • Size

    978KB

  • MD5

    c1433a95d3838bb9902a3507ef241c50

  • SHA1

    3c8f46d3b2c44c8f4d4078804e9c3f1a6d84300e

  • SHA256

    721f9818831a15447c39c3addcd3c72cc26f88ac790695e508fc1a668c731d9e

  • SHA512

    d65b0304abd47cdbc30905321ad1701285139cbe322afc4d947279c39ccef14be40523f9e886377df6de44fe55c8d77000fafd52f3a7e8b80ff26d3122d3de92

  • SSDEEP

    12288:zJB0lh7r6bIj22CAoyerJVbtqeql2THGseB/A96gFG+xs6/iLMGper3dpfAdR8n3:zQ7W81HeqwTHVepA9u8YehpKR1Dz4mC

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\NEAS.c1433a95d3838bb9902a3507ef241c50.exe
    "C:\Users\Admin\AppData\Local\Temp\NEAS.c1433a95d3838bb9902a3507ef241c50.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2552

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2552-3-0x0000000002420000-0x0000000002421000-memory.dmp

    Filesize

    4KB

  • memory/2552-2-0x0000000002420000-0x0000000002421000-memory.dmp

    Filesize

    4KB

  • memory/2552-4-0x0000000002420000-0x0000000002421000-memory.dmp

    Filesize

    4KB

  • memory/2552-5-0x0000000002420000-0x0000000002421000-memory.dmp

    Filesize

    4KB

  • memory/2552-6-0x0000000002420000-0x0000000002421000-memory.dmp

    Filesize

    4KB

  • memory/2552-7-0x0000000002420000-0x0000000002421000-memory.dmp

    Filesize

    4KB

  • memory/2552-9-0x0000000002420000-0x0000000002421000-memory.dmp

    Filesize

    4KB

  • memory/2552-14-0x0000000002420000-0x0000000002421000-memory.dmp

    Filesize

    4KB

  • memory/2552-13-0x0000000002420000-0x0000000002421000-memory.dmp

    Filesize

    4KB

  • memory/2552-12-0x0000000002420000-0x0000000002421000-memory.dmp

    Filesize

    4KB

  • memory/2552-11-0x0000000002420000-0x0000000002421000-memory.dmp

    Filesize

    4KB

  • memory/2552-10-0x0000000002420000-0x0000000002421000-memory.dmp

    Filesize

    4KB

  • memory/2552-8-0x0000000002420000-0x0000000002421000-memory.dmp

    Filesize

    4KB