Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
5s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
25/12/2023, 16:21 UTC
General
-
Target
2caf18c5e952b4770992137c65b3c7eb.exe
-
Size
2.2MB
-
MD5
2caf18c5e952b4770992137c65b3c7eb
-
SHA1
623d211f113d1c556006f6a6000474cdd034467a
-
SHA256
e910213e91de17837384e5d5aa33c4b5f9eb2eede152ffedfc86d40b231f71e9
-
SHA512
e6bb10e9aed8b358ac51061a9995dc695d66318902ef25fcdfe317a6d15f24dded47d1df7177df1e33bdadfd3f6c179acdfb0a2706774aac66d41e60b02199ca
-
SSDEEP
49152:OCyNN+VYY6DL9GZjY2yVSgPIf+kDYdVQxot+j1AdPn6fZ80Es:OCyNN+Ps9YSVPs+6VxYA46Rn
Score
7/10
Malware Config
Signatures
-
Checks BIOS information in registry 2 TTPs 1 IoCs
BIOS information is often read in order to detect sandboxing environments.
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2caf18c5e952b4770992137c65b3c7eb.exe"C:\Users\Admin\AppData\Local\Temp\2caf18c5e952b4770992137c65b3c7eb.exe"1⤵
- Checks BIOS information in registry
- Suspicious use of SetWindowsHookEx
Network
-
DNSwww.nnnwg.comRemote address:8.8.8.8:53Requestwww.nnnwg.comIN AResponse
No results found
-
8.8.8.8:53www.nnnwg.comdns
DNS Request
www.nnnwg.com
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.1MB
-
Filesize
3.1MB
-
Filesize
3.1MB
-
Filesize
3.1MB
-
Filesize
3.1MB
-
Filesize
3.1MB
-
Filesize
3.1MB
-
Filesize
3.1MB
-
Filesize
3.1MB
-
Filesize
3.1MB
-
Filesize
3.1MB
-
Filesize
3.1MB
-
Filesize
3.1MB
-
Filesize
3.1MB
-
Filesize
3.1MB
-
Filesize
3.1MB
-
Filesize
3.1MB
-
Filesize
3.1MB
-
Filesize
3.1MB
-
Filesize
3.1MB
-
Filesize
3.1MB