Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    140s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    28/12/2023, 20:57

General

  • Target

    DLLLoad.exe

  • Size

    239KB

  • MD5

    4e9a4c28fdd0e60042779117a955a074

  • SHA1

    ec487996c03cd1c3bf3dc56b07bf31196e0cb6ed

  • SHA256

    12f991863c77a5ef017a0b3be8146de65952b736dd2cd28708ec51b1d934aa36

  • SHA512

    992c437259485f6c34d311b5715eb21063763ef8181568508f1041b1055b8a7eb8af5206fdf35c1aa40749126c45d68c0ca060c52aab17e57e13375194cb1b15

  • SSDEEP

    6144:Aujzmdywb9qES9cXP755n9aCiSaX9zeTxEKjMl:hjpyqEcO5h9aCiSatzeVEN

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 15 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\DLLLoad.exe
    "C:\Users\Admin\AppData\Local\Temp\DLLLoad.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • Suspicious behavior: EnumeratesProcesses
    PID:2964

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2964-1-0x0000000001270000-0x00000000012F5000-memory.dmp

    Filesize

    532KB

  • memory/2964-0-0x0000000001270000-0x00000000012F5000-memory.dmp

    Filesize

    532KB

  • memory/2964-3-0x0000000001270000-0x00000000012F5000-memory.dmp

    Filesize

    532KB