Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231020-en
  • resource tags

    arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
  • submitted
    23/11/2023, 16:58

General

  • Target

    eac5ee5fc1e94219213f4f3ec4169e849e47a8abf259713589abd67a3f5e490a.exe

  • Size

    1.6MB

  • MD5

    a047755214bd55c4d4e709d053c8f8d6

  • SHA1

    8bae7ccfffad437715f8c519e9bd9baabf034abb

  • SHA256

    eac5ee5fc1e94219213f4f3ec4169e849e47a8abf259713589abd67a3f5e490a

  • SHA512

    9e7cf2d6b4a93733510d2db8d7fc849f58071dc113cfd6bdf01ad109e83bec4fa6bd273db68b9bf9592d704f47f5faba9191836ff31ff85c4fb4f4df9e6ef308

  • SSDEEP

    49152:C6QXQDnRZspd7WULzSrJ4NnzhABGBbcTGKr14lDGPL:CDuRZsHWUfSOZzmBYcTGKZQDGPL

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\eac5ee5fc1e94219213f4f3ec4169e849e47a8abf259713589abd67a3f5e490a.exe
    "C:\Users\Admin\AppData\Local\Temp\eac5ee5fc1e94219213f4f3ec4169e849e47a8abf259713589abd67a3f5e490a.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • Suspicious use of SetWindowsHookEx
    PID:2216

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2216-0-0x0000000000400000-0x00000000006B4000-memory.dmp

    Filesize

    2.7MB

  • memory/2216-1-0x0000000075A40000-0x0000000075A87000-memory.dmp

    Filesize

    284KB

  • memory/2216-811-0x0000000002400000-0x0000000002511000-memory.dmp

    Filesize

    1.1MB

  • memory/2216-812-0x0000000002400000-0x0000000002511000-memory.dmp

    Filesize

    1.1MB

  • memory/2216-814-0x0000000002400000-0x0000000002511000-memory.dmp

    Filesize

    1.1MB

  • memory/2216-816-0x0000000002400000-0x0000000002511000-memory.dmp

    Filesize

    1.1MB

  • memory/2216-818-0x0000000002400000-0x0000000002511000-memory.dmp

    Filesize

    1.1MB

  • memory/2216-820-0x0000000002400000-0x0000000002511000-memory.dmp

    Filesize

    1.1MB

  • memory/2216-822-0x0000000002400000-0x0000000002511000-memory.dmp

    Filesize

    1.1MB

  • memory/2216-824-0x0000000002400000-0x0000000002511000-memory.dmp

    Filesize

    1.1MB

  • memory/2216-826-0x0000000002400000-0x0000000002511000-memory.dmp

    Filesize

    1.1MB

  • memory/2216-828-0x0000000002400000-0x0000000002511000-memory.dmp

    Filesize

    1.1MB

  • memory/2216-830-0x0000000002400000-0x0000000002511000-memory.dmp

    Filesize

    1.1MB

  • memory/2216-832-0x0000000002400000-0x0000000002511000-memory.dmp

    Filesize

    1.1MB

  • memory/2216-834-0x0000000002400000-0x0000000002511000-memory.dmp

    Filesize

    1.1MB

  • memory/2216-836-0x0000000002400000-0x0000000002511000-memory.dmp

    Filesize

    1.1MB

  • memory/2216-838-0x0000000002400000-0x0000000002511000-memory.dmp

    Filesize

    1.1MB

  • memory/2216-840-0x0000000002400000-0x0000000002511000-memory.dmp

    Filesize

    1.1MB

  • memory/2216-842-0x0000000002400000-0x0000000002511000-memory.dmp

    Filesize

    1.1MB

  • memory/2216-844-0x0000000002400000-0x0000000002511000-memory.dmp

    Filesize

    1.1MB

  • memory/2216-846-0x0000000002400000-0x0000000002511000-memory.dmp

    Filesize

    1.1MB

  • memory/2216-848-0x0000000002400000-0x0000000002511000-memory.dmp

    Filesize

    1.1MB

  • memory/2216-850-0x0000000002400000-0x0000000002511000-memory.dmp

    Filesize

    1.1MB

  • memory/2216-852-0x0000000002400000-0x0000000002511000-memory.dmp

    Filesize

    1.1MB

  • memory/2216-854-0x0000000002400000-0x0000000002511000-memory.dmp

    Filesize

    1.1MB

  • memory/2216-856-0x0000000002400000-0x0000000002511000-memory.dmp

    Filesize

    1.1MB

  • memory/2216-858-0x0000000002400000-0x0000000002511000-memory.dmp

    Filesize

    1.1MB

  • memory/2216-860-0x0000000002400000-0x0000000002511000-memory.dmp

    Filesize

    1.1MB

  • memory/2216-862-0x0000000002400000-0x0000000002511000-memory.dmp

    Filesize

    1.1MB

  • memory/2216-864-0x0000000002400000-0x0000000002511000-memory.dmp

    Filesize

    1.1MB

  • memory/2216-866-0x0000000002400000-0x0000000002511000-memory.dmp

    Filesize

    1.1MB

  • memory/2216-868-0x0000000002400000-0x0000000002511000-memory.dmp

    Filesize

    1.1MB

  • memory/2216-870-0x0000000002400000-0x0000000002511000-memory.dmp

    Filesize

    1.1MB

  • memory/2216-872-0x0000000002400000-0x0000000002511000-memory.dmp

    Filesize

    1.1MB

  • memory/2216-2547-0x0000000002270000-0x00000000023F1000-memory.dmp

    Filesize

    1.5MB

  • memory/2216-8686-0x0000000002400000-0x0000000002511000-memory.dmp

    Filesize

    1.1MB

  • memory/2216-8693-0x0000000000400000-0x00000000006B4000-memory.dmp

    Filesize

    2.7MB

  • memory/2216-8695-0x0000000000400000-0x00000000006B4000-memory.dmp

    Filesize

    2.7MB