Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

5

Static

static

1

bfbf9c2f6c...be.exe

windows7-x64

5

bfbf9c2f6c...be.exe

windows10-2004-x64

5

Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/12/2023, 12:42

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    bfbf9c2f6ca8612f27f019caa57d0396883654590f80c0d7d5efefe4c663a6be.exe

  • Size

    1.4MB

  • MD5

    a2e650257fc485b6272de3f1c2d8ccf6

  • SHA1

    9c60f4492b5134626cf7846c4ddb2fb099ac06c6

  • SHA256

    bfbf9c2f6ca8612f27f019caa57d0396883654590f80c0d7d5efefe4c663a6be

  • SHA512

    103db49d55a9b1ee04d6241715aac7f76d00c021a093fc90561d1723be8fda82ffe60e62980050f84760d81121058be2f58dcff2fe8d7e100bfaa21d3fd7bd03

  • SSDEEP

    12288:e3/aYKoAUeXW0H9AWMX1Ny9l/aFxaafr7Z47KokPXVBp14WsN049mej:e3/ag8aXb0liaafrN47UTT4H049m

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\bfbf9c2f6ca8612f27f019caa57d0396883654590f80c0d7d5efefe4c663a6be.exe
    "C:\Users\Admin\AppData\Local\Temp\bfbf9c2f6ca8612f27f019caa57d0396883654590f80c0d7d5efefe4c663a6be.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    PID:4848

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4848-0-0x0000000140000000-0x000000014016C000-memory.dmp

    Filesize

    1.4MB

    Download

  • memory/4848-1-0x0000000140000000-0x000000014016C000-memory.dmp

    Filesize

    1.4MB

    Download