Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    140s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    12/12/2023, 09:59

General

  • Target

    e1a50fb0640c3b21500f17150ea40a021bd1cf93240b2e7e4081801e8e3fe703.exe

  • Size

    5.9MB

  • MD5

    8a26bc86c940d17a1240a4ee131f0797

  • SHA1

    298bd502cf40b228c97ff54baa156a47e9b75903

  • SHA256

    e1a50fb0640c3b21500f17150ea40a021bd1cf93240b2e7e4081801e8e3fe703

  • SHA512

    ad919c6421e75df47d542079d831ff5b1deee1bf4dfcc36514c2b5af15285c19828d768442c30c515a0c3b6bbc34dc65ee5eb435418e6c584ba96b8f798b8cbb

  • SSDEEP

    49152:C/hGtHTsZmVWEzzJ8g6Ij+MZpmHMkMdZ5mS5uZc7a+EulEjVLb0bEO+TXJtn:t7pHyMjWMbg6K

Score
1/10

Malware Config

Signatures

  • Suspicious use of FindShellTrayWindow 4 IoCs
  • Suspicious use of SendNotifyMessage 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\e1a50fb0640c3b21500f17150ea40a021bd1cf93240b2e7e4081801e8e3fe703.exe
    "C:\Users\Admin\AppData\Local\Temp\e1a50fb0640c3b21500f17150ea40a021bd1cf93240b2e7e4081801e8e3fe703.exe"
    1⤵
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    PID:2752

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2752-0-0x00000000002F0000-0x00000000002F1000-memory.dmp

    Filesize

    4KB

  • memory/2752-1-0x0000000000400000-0x00000000009FD000-memory.dmp

    Filesize

    6.0MB

  • memory/2752-3-0x00000000002F0000-0x00000000002F1000-memory.dmp

    Filesize

    4KB