Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231020-en
  • resource tags

    arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
  • submitted
    15/11/2023, 18:05

General

  • Target

    44a70767e0178fa6b84b7af800857f4d73fbb1b54c6a8296b2071c83c25370c0.exe

  • Size

    1.9MB

  • MD5

    75dca23086475c84e4c23b7299dc0772

  • SHA1

    272ca07a335193a389e35fba3ec1695fc1545783

  • SHA256

    44a70767e0178fa6b84b7af800857f4d73fbb1b54c6a8296b2071c83c25370c0

  • SHA512

    fa7045a5eef07956393758dda0f266cef095dbca5876a8024e3127538721b8fe1e1e7ec8dec7b650d2478d977d2fd0dc3f772cbbb3adea888602eb1a92fe87a0

  • SSDEEP

    24576:O8/2jQW0RiDMPm4NkNnJV7OcUSVU97CjYyxN5+oQW/288sBXeeKALV7TyvVqP51X:GjQW+iCmukufUU9O/xN52wZnK24qP51X

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\44a70767e0178fa6b84b7af800857f4d73fbb1b54c6a8296b2071c83c25370c0.exe
    "C:\Users\Admin\AppData\Local\Temp\44a70767e0178fa6b84b7af800857f4d73fbb1b54c6a8296b2071c83c25370c0.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • Suspicious use of SetWindowsHookEx
    PID:2932

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2932-0-0x0000000000400000-0x000000000071D000-memory.dmp

    Filesize

    3.1MB

  • memory/2932-1-0x0000000076790000-0x00000000767D7000-memory.dmp

    Filesize

    284KB

  • memory/2932-811-0x00000000025E0000-0x00000000026F1000-memory.dmp

    Filesize

    1.1MB

  • memory/2932-814-0x00000000025E0000-0x00000000026F1000-memory.dmp

    Filesize

    1.1MB

  • memory/2932-812-0x00000000025E0000-0x00000000026F1000-memory.dmp

    Filesize

    1.1MB

  • memory/2932-816-0x00000000025E0000-0x00000000026F1000-memory.dmp

    Filesize

    1.1MB

  • memory/2932-818-0x00000000025E0000-0x00000000026F1000-memory.dmp

    Filesize

    1.1MB

  • memory/2932-820-0x00000000025E0000-0x00000000026F1000-memory.dmp

    Filesize

    1.1MB

  • memory/2932-822-0x00000000025E0000-0x00000000026F1000-memory.dmp

    Filesize

    1.1MB

  • memory/2932-824-0x00000000025E0000-0x00000000026F1000-memory.dmp

    Filesize

    1.1MB

  • memory/2932-826-0x00000000025E0000-0x00000000026F1000-memory.dmp

    Filesize

    1.1MB

  • memory/2932-828-0x00000000025E0000-0x00000000026F1000-memory.dmp

    Filesize

    1.1MB

  • memory/2932-830-0x00000000025E0000-0x00000000026F1000-memory.dmp

    Filesize

    1.1MB

  • memory/2932-832-0x00000000025E0000-0x00000000026F1000-memory.dmp

    Filesize

    1.1MB

  • memory/2932-834-0x00000000025E0000-0x00000000026F1000-memory.dmp

    Filesize

    1.1MB

  • memory/2932-836-0x00000000025E0000-0x00000000026F1000-memory.dmp

    Filesize

    1.1MB

  • memory/2932-838-0x00000000025E0000-0x00000000026F1000-memory.dmp

    Filesize

    1.1MB

  • memory/2932-840-0x00000000025E0000-0x00000000026F1000-memory.dmp

    Filesize

    1.1MB

  • memory/2932-842-0x00000000025E0000-0x00000000026F1000-memory.dmp

    Filesize

    1.1MB

  • memory/2932-844-0x00000000025E0000-0x00000000026F1000-memory.dmp

    Filesize

    1.1MB

  • memory/2932-846-0x00000000025E0000-0x00000000026F1000-memory.dmp

    Filesize

    1.1MB

  • memory/2932-848-0x00000000025E0000-0x00000000026F1000-memory.dmp

    Filesize

    1.1MB

  • memory/2932-850-0x00000000025E0000-0x00000000026F1000-memory.dmp

    Filesize

    1.1MB

  • memory/2932-852-0x00000000025E0000-0x00000000026F1000-memory.dmp

    Filesize

    1.1MB

  • memory/2932-854-0x00000000025E0000-0x00000000026F1000-memory.dmp

    Filesize

    1.1MB

  • memory/2932-856-0x00000000025E0000-0x00000000026F1000-memory.dmp

    Filesize

    1.1MB

  • memory/2932-858-0x00000000025E0000-0x00000000026F1000-memory.dmp

    Filesize

    1.1MB

  • memory/2932-860-0x00000000025E0000-0x00000000026F1000-memory.dmp

    Filesize

    1.1MB

  • memory/2932-862-0x00000000025E0000-0x00000000026F1000-memory.dmp

    Filesize

    1.1MB

  • memory/2932-864-0x00000000025E0000-0x00000000026F1000-memory.dmp

    Filesize

    1.1MB

  • memory/2932-866-0x00000000025E0000-0x00000000026F1000-memory.dmp

    Filesize

    1.1MB

  • memory/2932-868-0x00000000025E0000-0x00000000026F1000-memory.dmp

    Filesize

    1.1MB

  • memory/2932-870-0x00000000025E0000-0x00000000026F1000-memory.dmp

    Filesize

    1.1MB

  • memory/2932-872-0x00000000025E0000-0x00000000026F1000-memory.dmp

    Filesize

    1.1MB

  • memory/2932-2547-0x0000000002330000-0x00000000024B1000-memory.dmp

    Filesize

    1.5MB

  • memory/2932-8687-0x00000000025E0000-0x00000000026F1000-memory.dmp

    Filesize

    1.1MB

  • memory/2932-8694-0x0000000000400000-0x000000000071D000-memory.dmp

    Filesize

    3.1MB

  • memory/2932-8696-0x0000000000400000-0x000000000071D000-memory.dmp

    Filesize

    3.1MB