Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    140s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    29/12/2023, 21:44

General

  • Target

    HoG_Police+2trn.exe

  • Size

    1.2MB

  • MD5

    98f0b612927e076cc6e04ac7cab018c2

  • SHA1

    612132f2c00271777fcbdf4818e8e8884982c9ba

  • SHA256

    395337246c8421bf60b2b58c4924d75ab201b4abe3d980e8798d47da5cb0f24a

  • SHA512

    70921187654a036a0a7a73f1714648b8e7cca4f7082a55e5d9d4b0e0bb107feb39398fd0b147c31a5f6fd788f74890bca61923ced09a8cbd46877cf575e53387

  • SSDEEP

    12288:uA+aiRFgC9EYSyZInwC4emEDc6VqJRkOA0+UK35aocJ1ZzDf0vt9YHT3pdQTgIQ:uGODE5y6nFND/WkgRvVDsvUHTRIf

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Drops file in System32 directory 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\HoG_Police+2trn.exe
    "C:\Users\Admin\AppData\Local\Temp\HoG_Police+2trn.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in System32 directory
    • Suspicious use of SetWindowsHookEx
    PID:2612

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Windows\SysWOW64\bassmod.dll

    Filesize

    33KB

    MD5

    e4ec57e8508c5c4040383ebe6d367928

    SHA1

    b22bcce36d9fdeae8ab7a7ecc0b01c8176648d06

    SHA256

    8ad9e47693e292f381da42ddc13724a3063040e51c26f4ca8e1f8e2f1ddd547f

    SHA512

    77d5cf66caf06e192e668fae2b2594e60a498e8e0ccef5b09b9710721a4cdb0c852d00c446fd32c5b5c85e739de2e73cb1f1f6044879fe7d237341bbb6f27822

  • memory/2612-14-0x0000000010000000-0x0000000010013000-memory.dmp

    Filesize

    76KB

  • memory/2612-16-0x0000000010000000-0x0000000010013000-memory.dmp

    Filesize

    76KB

  • memory/2612-9-0x0000000010000000-0x0000000010013000-memory.dmp

    Filesize

    76KB

  • memory/2612-10-0x0000000010000000-0x0000000010013000-memory.dmp

    Filesize

    76KB

  • memory/2612-11-0x0000000010000000-0x0000000010013000-memory.dmp

    Filesize

    76KB

  • memory/2612-12-0x0000000010000000-0x0000000010013000-memory.dmp

    Filesize

    76KB

  • memory/2612-8-0x0000000010000000-0x0000000010013000-memory.dmp

    Filesize

    76KB

  • memory/2612-13-0x0000000010000000-0x0000000010013000-memory.dmp

    Filesize

    76KB

  • memory/2612-15-0x0000000010000000-0x0000000010013000-memory.dmp

    Filesize

    76KB

  • memory/2612-6-0x0000000010000000-0x0000000010013000-memory.dmp

    Filesize

    76KB

  • memory/2612-17-0x0000000010000000-0x0000000010013000-memory.dmp

    Filesize

    76KB

  • memory/2612-18-0x0000000010000000-0x0000000010013000-memory.dmp

    Filesize

    76KB

  • memory/2612-19-0x0000000010000000-0x0000000010013000-memory.dmp

    Filesize

    76KB

  • memory/2612-20-0x0000000010000000-0x0000000010013000-memory.dmp

    Filesize

    76KB

  • memory/2612-21-0x0000000010000000-0x0000000010013000-memory.dmp

    Filesize

    76KB

  • memory/2612-22-0x0000000010000000-0x0000000010013000-memory.dmp

    Filesize

    76KB