Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231130-en
  • resource tags

    arch:x64arch:x86image:win7-20231130-enlocale:en-usos:windows7-x64system
  • submitted
    11/12/2023, 06:58

General

  • Target

    tmp.exe

  • Size

    423KB

  • MD5

    fd406efee25a445e83db52dee9924112

  • SHA1

    a104d5e774e3a036bbc6a02351a5a15d8a5f59e3

  • SHA256

    bd62a021da405f1d4387d8760cf22a2a9aeacf469ee40dd5a515c6fa8abb423e

  • SHA512

    7959cfb4c1333525290b313569a3cfb858f6e4ee787d537521d11bfb4044ed41a2b562a4672ec964cd9bc3a9b0032ee3f6d008bef8a90f93c62d4efef4d9b92e

  • SSDEEP

    6144:GmbpJJtJQGyVqnuRqspLf41BpUqbH0TGngDeT93YQjhpoP+/eu8zni:hFspLf41TUqr0qntT1YQSaJ

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\tmp.exe
    "C:\Users\Admin\AppData\Local\Temp\tmp.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:3044

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\ZohoMeeting\log\CustomerPluginInstaller.log

    Filesize

    1KB

    MD5

    066322c327011160dc0a95cebe6dd147

    SHA1

    27596b058a9787a33f6ff6304c9bbfcd6be4170b

    SHA256

    85a33edc757ab67e099d91c8dca39ec8e8ef3194defdeb62bd3182e8e7cfcee9

    SHA512

    4939424b4d0df7cff0a4857ae63cccc55357673c16a27021879acaf06cda89a9df935a0e76b8294c64cdf4244ad40924a5651e48b331d782ae95411559166b1e

  • C:\Users\Admin\AppData\Local\ZohoMeeting\log\CustomerPluginInstaller.log

    Filesize

    2KB

    MD5

    c99ed990a5f793bc49a3cb87dcc31c90

    SHA1

    2642d422896edb7fa6e73ae48d5ddb6c66b666d9

    SHA256

    c0647e26f37c474b2dfe2a77ae3d7cc0df34b0da5f1c390f8e56ccf83a06dcbf

    SHA512

    055314f97dd16d78b5950448fbe82c3754346c4a780155594005c0ea9f80389732a7501259c9a583ebe88bd677d59206ae1fd6f45cbe2a1a8644b7599778fc92