Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
26/12/2023, 14:10
General
-
Target
749a5fae99433b847ed75ddc075a7379.exe
-
Size
185KB
-
MD5
749a5fae99433b847ed75ddc075a7379
-
SHA1
dc941c5b311e1d3cddb0fdc1677b29df69b51f76
-
SHA256
7b9ff4a34c6e887297a863f5b1444168f6b42fdba66e3bed3691bb4a34540c3a
-
SHA512
53dba393d67ffeeb48aae0b404099941e7b3035f2ce324f91e2d4d67ff8a7af130cf672a83ab37cc817e7418ae3cd8c561cb1baf9ee3484b2dcdd7f4af9dd327
-
SSDEEP
3072:TYAaOCa96mu983FGhEJ+cyTMumWb3xsy3AOupMveYJdj0vlXTKa9WT1p9VNSL7:EI7u9+GhEJmXme24AOuie8dQlXTKIWTY
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Windows\Explorer.EXEC:\Windows\Explorer.EXE1⤵
-
C:\Users\Admin\AppData\Local\Temp\749a5fae99433b847ed75ddc075a7379.exe"C:\Users\Admin\AppData\Local\Temp\749a5fae99433b847ed75ddc075a7379.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
160KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
960KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
16KB
-
Filesize
160KB
-
Filesize
228KB
-
Filesize
160KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
160KB
-
Filesize
228KB
-
Filesize
960KB
-
Filesize
4KB
-
Filesize
28KB