Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    139s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231023-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
  • submitted
    15/11/2023, 18:05

General

  • Target

    44a70767e0178fa6b84b7af800857f4d73fbb1b54c6a8296b2071c83c25370c0.exe

  • Size

    1.9MB

  • MD5

    75dca23086475c84e4c23b7299dc0772

  • SHA1

    272ca07a335193a389e35fba3ec1695fc1545783

  • SHA256

    44a70767e0178fa6b84b7af800857f4d73fbb1b54c6a8296b2071c83c25370c0

  • SHA512

    fa7045a5eef07956393758dda0f266cef095dbca5876a8024e3127538721b8fe1e1e7ec8dec7b650d2478d977d2fd0dc3f772cbbb3adea888602eb1a92fe87a0

  • SSDEEP

    24576:O8/2jQW0RiDMPm4NkNnJV7OcUSVU97CjYyxN5+oQW/288sBXeeKALV7TyvVqP51X:GjQW+iCmukufUU9O/xN52wZnK24qP51X

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\44a70767e0178fa6b84b7af800857f4d73fbb1b54c6a8296b2071c83c25370c0.exe
    "C:\Users\Admin\AppData\Local\Temp\44a70767e0178fa6b84b7af800857f4d73fbb1b54c6a8296b2071c83c25370c0.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • Suspicious use of SetWindowsHookEx
    PID:1932

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1932-0-0x0000000000400000-0x000000000071D000-memory.dmp

    Filesize

    3.1MB

  • memory/1932-1-0x00000000767F0000-0x0000000076A05000-memory.dmp

    Filesize

    2.1MB

  • memory/1932-3875-0x0000000076A10000-0x0000000076BB0000-memory.dmp

    Filesize

    1.6MB

  • memory/1932-5884-0x00000000771F0000-0x000000007726A000-memory.dmp

    Filesize

    488KB

  • memory/1932-13069-0x0000000000400000-0x000000000071D000-memory.dmp

    Filesize

    3.1MB

  • memory/1932-13070-0x0000000000400000-0x000000000071D000-memory.dmp

    Filesize

    3.1MB

  • memory/1932-13071-0x0000000000400000-0x000000000071D000-memory.dmp

    Filesize

    3.1MB

  • memory/1932-13072-0x0000000000400000-0x000000000071D000-memory.dmp

    Filesize

    3.1MB

  • memory/1932-13074-0x0000000000400000-0x000000000071D000-memory.dmp

    Filesize

    3.1MB

  • memory/1932-13075-0x0000000000400000-0x000000000071D000-memory.dmp

    Filesize

    3.1MB

  • memory/1932-13076-0x0000000000400000-0x000000000071D000-memory.dmp

    Filesize

    3.1MB