Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
141s -
max time network
157s -
platform
windows7_x64 -
resource
win7-20231020-en -
resource tags
-
submitted
11/12/2023, 20:03
General
-
Target
72a563aa53fd13cb7939c864bfcaa1c1d113cdf009517bb77331719fca6049a6.exe
-
Size
1.8MB
-
MD5
de46481aafdc865c15162355c80852a8
-
SHA1
17e91c287384685451da982f9b767b67f83a8227
-
SHA256
72a563aa53fd13cb7939c864bfcaa1c1d113cdf009517bb77331719fca6049a6
-
SHA512
cee3b240682fb47e61c05227923e9255127fdd2b73d0ef9f8356a305ed97a6fd30240389367d0ae8db8c7161b5a3eb764a2a7328bba4a5c4d9afe067333f6ad9
-
SSDEEP
49152:0krl9BAZhp2y+XwBkj++nOyUbPBsENDkoDHDpr/l:0kzMpaf+OqTBt1koD1rd
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\72a563aa53fd13cb7939c864bfcaa1c1d113cdf009517bb77331719fca6049a6.exe"C:\Users\Admin\AppData\Local\Temp\72a563aa53fd13cb7939c864bfcaa1c1d113cdf009517bb77331719fca6049a6.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
724KB
MD5a96fbd5e66b31f3d816ad80f623e9bd9
SHA14eda42260bd3eb930cd4eafd7d15c6af367bcf18
SHA2562e67ba278646fde95bb614dcbcc7da1c6bf7976c918b2c6ad3d78640000326f3
SHA51243921107313775ea14b1bd33cf758c13798f4fa1c1074771c1c96b1b43b98f3416d249ed8ab3171383772d0054829c3754a91b5e94135f1df6d67a76f599c80e
-
Filesize
3.6MB
-
Filesize
12KB
-
Filesize
3.6MB
-
Filesize
3.6MB
-
Filesize
3.6MB
-
Filesize
3.6MB