Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    141s
  • max time network
    146s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26/12/2023, 15:24

General

  • Target

    78ba729c319500d4ab08b31bf056dba5.exe

  • Size

    2.2MB

  • MD5

    78ba729c319500d4ab08b31bf056dba5

  • SHA1

    670f23244940054f64556ba78102c13af08c3161

  • SHA256

    dd053a01e851c748806336f6b9a7a5a01cc70a5df6af0f11ab581b5234e617fd

  • SHA512

    deb9e5f320828190919af0c126bdc8b80e3862c889701877c473a78b38eaa6d4dd587f9c4280f830e6f103abdba540793b11e5f6fef75a905b8c25cb6c28a6c2

  • SSDEEP

    49152:5JUwM7O85GsIPANnMHrS9q2+OEn7tiNNusm4J67VGImpiminyYN:w3dtIiAri+OcKA4aVjt5N

Score
1/10

Malware Config

Signatures

  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SendNotifyMessage 1 IoCs
  • Suspicious use of SetWindowsHookEx 5 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\78ba729c319500d4ab08b31bf056dba5.exe
    "C:\Users\Admin\AppData\Local\Temp\78ba729c319500d4ab08b31bf056dba5.exe"
    1⤵
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:3916

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3916-0-0x0000000000400000-0x000000000057A000-memory.dmp

    Filesize

    1.5MB

  • memory/3916-1-0x0000000002330000-0x0000000002456000-memory.dmp

    Filesize

    1.1MB

  • memory/3916-2-0x0000000002330000-0x0000000002456000-memory.dmp

    Filesize

    1.1MB

  • memory/3916-3-0x0000000002330000-0x0000000002456000-memory.dmp

    Filesize

    1.1MB

  • memory/3916-5-0x0000000002330000-0x0000000002456000-memory.dmp

    Filesize

    1.1MB

  • memory/3916-8-0x0000000002330000-0x0000000002456000-memory.dmp

    Filesize

    1.1MB

  • memory/3916-10-0x0000000002330000-0x0000000002456000-memory.dmp

    Filesize

    1.1MB

  • memory/3916-7-0x0000000002330000-0x0000000002456000-memory.dmp

    Filesize

    1.1MB

  • memory/3916-6-0x0000000002330000-0x0000000002456000-memory.dmp

    Filesize

    1.1MB

  • memory/3916-4-0x0000000002330000-0x0000000002456000-memory.dmp

    Filesize

    1.1MB

  • memory/3916-19-0x000000007FE40000-0x000000007FE44000-memory.dmp

    Filesize

    16KB

  • memory/3916-18-0x0000000077470000-0x0000000077471000-memory.dmp

    Filesize

    4KB

  • memory/3916-17-0x0000000000400000-0x000000000057A000-memory.dmp

    Filesize

    1.5MB

  • memory/3916-20-0x0000000000400000-0x000000000057A000-memory.dmp

    Filesize

    1.5MB

  • memory/3916-25-0x0000000075F30000-0x0000000076013000-memory.dmp

    Filesize

    908KB

  • memory/3916-24-0x00000000760F0000-0x0000000076290000-memory.dmp

    Filesize

    1.6MB

  • memory/3916-30-0x0000000074870000-0x0000000074A80000-memory.dmp

    Filesize

    2.1MB

  • memory/3916-31-0x0000000077190000-0x000000007720A000-memory.dmp

    Filesize

    488KB

  • memory/3916-32-0x0000000004280000-0x0000000004311000-memory.dmp

    Filesize

    580KB

  • memory/3916-34-0x0000000010000000-0x0000000010091000-memory.dmp

    Filesize

    580KB

  • memory/3916-35-0x0000000002330000-0x0000000002456000-memory.dmp

    Filesize

    1.1MB

  • memory/3916-36-0x0000000002330000-0x0000000002456000-memory.dmp

    Filesize

    1.1MB

  • memory/3916-38-0x0000000002330000-0x0000000002456000-memory.dmp

    Filesize

    1.1MB

  • memory/3916-40-0x0000000002330000-0x0000000002456000-memory.dmp

    Filesize

    1.1MB

  • memory/3916-41-0x0000000000400000-0x000000000057A000-memory.dmp

    Filesize

    1.5MB

  • memory/3916-42-0x00000000760F0000-0x0000000076290000-memory.dmp

    Filesize

    1.6MB

  • memory/3916-43-0x00000000762B0000-0x00000000762D4000-memory.dmp

    Filesize

    144KB

  • memory/3916-46-0x0000000075280000-0x0000000075288000-memory.dmp

    Filesize

    32KB

  • memory/3916-51-0x0000000074870000-0x0000000074A80000-memory.dmp

    Filesize

    2.1MB

  • memory/3916-50-0x00000000770E0000-0x000000007718F000-memory.dmp

    Filesize

    700KB

  • memory/3916-49-0x0000000075420000-0x0000000075426000-memory.dmp

    Filesize

    24KB

  • memory/3916-48-0x0000000076CC0000-0x0000000076D05000-memory.dmp

    Filesize

    276KB

  • memory/3916-47-0x0000000075430000-0x00000000759E3000-memory.dmp

    Filesize

    5.7MB

  • memory/3916-45-0x0000000075F30000-0x0000000076013000-memory.dmp

    Filesize

    908KB

  • memory/3916-63-0x000000007FE40000-0x000000007FE44000-memory.dmp

    Filesize

    16KB