Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

0e7c3b1fe9...86.exe

windows7-x64

7

0e7c3b1fe9...86.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    117s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25/12/2023, 07:23

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    0e7c3b1fe9ecfc33edbab72073db7a86.exe

  • Size

    1.1MB

  • MD5

    0e7c3b1fe9ecfc33edbab72073db7a86

  • SHA1

    98d33da45e2c47d6a87d6c382fa50569723aa9a3

  • SHA256

    e7ff55344e29b147efe5d1da91ab733480e6b481384e47d7ddc8ba1ccb5324b4

  • SHA512

    d0417eea02cd19b7512f87087665f4e24101c357906339d652107241a2a9cc1a9d9c670c5b37a397b12646cba348f8e22903cc9e641be77af81dc43feba29fdb

  • SSDEEP

    24576:xvTdadr+JBPPGFjVHhNwaGnNQsUReWOM+YVVGLuAoS:xvTAtaBXKDNwrNQDeWOMnsP

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Suspicious use of SetWindowsHookEx 5 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0e7c3b1fe9ecfc33edbab72073db7a86.exe
    "C:\Users\Admin\AppData\Local\Temp\0e7c3b1fe9ecfc33edbab72073db7a86.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of SetWindowsHookEx
    PID:1920

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\E_4\krnln.fnr
    Filesize

    1.0MB

    MD5

    1081d7eb7a17faedfa588b93fc85365e

    SHA1

    884e264fa37bfb9e71d24f3f5c7554fdf94a8b9f

    SHA256

    0351d055cf1e194302ab125cc93208a8c733efb45dc301ca6e7e2a4051f411e0

    SHA512

    1ff9e7c495b9e005c8d3b56219794c31d804fe1944429e3d4fe013fd8fcb3f51c02b588748c7d9d869fdb115851932e8db4e6792aecd9c83f28237702582ba81

    Download Submit

  • memory/1920-2-0x0000000000400000-0x0000000000426000-memory.dmp

    Filesize

    152KB

    Download

  • memory/1920-5-0x0000000000400000-0x0000000000426000-memory.dmp

    Filesize

    152KB

    Download