Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20231020-en
  • resource tags

    arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
  • submitted
    31/10/2023, 01:40

General

  • Target

    30f085bc02e0f3d3962e778c126d3741.exe

  • Size

    6.7MB

  • MD5

    30f085bc02e0f3d3962e778c126d3741

  • SHA1

    5866325bb118257b4d2fe1f1763806ec1b55b052

  • SHA256

    832f0e0bfbee83129167535bef4de0fcf1c6973868be611d9a9e3843c2073a9e

  • SHA512

    88d5c08e3dd385a20ec38c25610eaf1f4cdde5336f796fe0f3c4d6c301c6652210a3c27632e24e92d5f0b8acfc81b91ba21fdd761e3fc2331e439d93839e0f43

  • SSDEEP

    98304:eCmGTzpfWVykI5gHxXHat5eEka5TCcFTjcTEQtGx7AqSdWSX+6:eCmGTVuVjnZaveEka53jX9AhoI+

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\30f085bc02e0f3d3962e778c126d3741.exe
    "C:\Users\Admin\AppData\Local\Temp\30f085bc02e0f3d3962e778c126d3741.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • Suspicious behavior: EnumeratesProcesses
    PID:2264

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2264-0-0x0000000140000000-0x0000000140DAD000-memory.dmp

    Filesize

    13.7MB

  • memory/2264-1-0x0000000077150000-0x0000000077152000-memory.dmp

    Filesize

    8KB

  • memory/2264-4-0x0000000140000000-0x0000000140DAD000-memory.dmp

    Filesize

    13.7MB

  • memory/2264-3-0x0000000077150000-0x0000000077152000-memory.dmp

    Filesize

    8KB

  • memory/2264-7-0x0000000076FA0000-0x0000000077149000-memory.dmp

    Filesize

    1.7MB

  • memory/2264-8-0x0000000077160000-0x0000000077162000-memory.dmp

    Filesize

    8KB

  • memory/2264-6-0x0000000077150000-0x0000000077152000-memory.dmp

    Filesize

    8KB

  • memory/2264-10-0x0000000077160000-0x0000000077162000-memory.dmp

    Filesize

    8KB

  • memory/2264-12-0x0000000077160000-0x0000000077162000-memory.dmp

    Filesize

    8KB

  • memory/2264-13-0x0000000140000000-0x0000000140DAD000-memory.dmp

    Filesize

    13.7MB

  • memory/2264-18-0x0000000140000000-0x0000000140DAD000-memory.dmp

    Filesize

    13.7MB

  • memory/2264-19-0x0000000076FA0000-0x0000000077149000-memory.dmp

    Filesize

    1.7MB