Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    137s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26/12/2023, 15:03

General

  • Target

    77a50c04410c641bcae5c115ee252a6e.exe

  • Size

    657KB

  • MD5

    77a50c04410c641bcae5c115ee252a6e

  • SHA1

    b9636a24a17d80b54aa043860130d9f3396afd80

  • SHA256

    40b51fc204fee86008c743611b39aba136d0dcb00b9be9962a90db1d0044b348

  • SHA512

    68728a4b6434430f6e9389d0ec43f6e9b78c4757a6bc459902ca3165509f92a46b00d9472afd02aa9a3e46fa4f77e4816332b8a625e6494ff7cad9c6df2db63a

  • SSDEEP

    12288:7rLmm/T2o+uD0h5dAgou7JY9tO/lA3zvPsvq1Xpvc85BnTsxslM/eFpgo:7rLmATIuwh5dAgogJY9tO/U8q1X9nIx0

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\77a50c04410c641bcae5c115ee252a6e.exe
    "C:\Users\Admin\AppData\Local\Temp\77a50c04410c641bcae5c115ee252a6e.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:1372

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\offconfig.temp

    Filesize

    590B

    MD5

    ce5edd496a10aadc3212b46dd15b2453

    SHA1

    263b74788fc952de9dfe8b59f78b5fd423bcaaf0

    SHA256

    81a7f6f08ab43260b956ac71b6185887bfccfa2f4ca6e953949cefcfdcebd158

    SHA512

    5843c85d1d9985a8c414d2c95804117396646c2dfaccd7c8b3270b3234bd5b3148fe2401974b9e5e41436e80dbbaed07956eb4f31d212fe5932095f1eb2c59e9