Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    138s
  • max time network
    170s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30/12/2023, 23:11

General

  • Target

    1f925f29242359a91fdb0491ec50adf6.exe

  • Size

    4.4MB

  • MD5

    1f925f29242359a91fdb0491ec50adf6

  • SHA1

    09c0f14b98042145e81246ed8f9ac288929f70be

  • SHA256

    75e02820db38070c2e1e65f5e5cb00b25f0406b3d3dde0524116efa65c954679

  • SHA512

    0613af97142dc005a6d728834dfa86d5fbabaa786872cb17dd642ed1ddd815bb968d7a75bb5cbca71117d515e49da20ce5a1b82f81e907348b3874d70eab69b1

  • SSDEEP

    98304:KKtLTu7lanBm02XFQDOPPB623rkwAWdNXyNP:KKoWBNuFQk627CWil

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1f925f29242359a91fdb0491ec50adf6.exe
    "C:\Users\Admin\AppData\Local\Temp\1f925f29242359a91fdb0491ec50adf6.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2508

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2508-0-0x0000000002350000-0x0000000002431000-memory.dmp

    Filesize

    900KB

  • memory/2508-1-0x0000000002350000-0x0000000002431000-memory.dmp

    Filesize

    900KB

  • memory/2508-2-0x0000000002350000-0x0000000002431000-memory.dmp

    Filesize

    900KB

  • memory/2508-4-0x0000000000490000-0x0000000000491000-memory.dmp

    Filesize

    4KB

  • memory/2508-12-0x0000000077610000-0x0000000077611000-memory.dmp

    Filesize

    4KB

  • memory/2508-14-0x00000000777A0000-0x00000000777A1000-memory.dmp

    Filesize

    4KB

  • memory/2508-13-0x0000000077852000-0x0000000077853000-memory.dmp

    Filesize

    4KB

  • memory/2508-15-0x00000000776D0000-0x00000000776D1000-memory.dmp

    Filesize

    4KB

  • memory/2508-16-0x00000000777B0000-0x00000000777B1000-memory.dmp

    Filesize

    4KB

  • memory/2508-18-0x0000000077720000-0x0000000077721000-memory.dmp

    Filesize

    4KB

  • memory/2508-19-0x0000000077710000-0x0000000077711000-memory.dmp

    Filesize

    4KB

  • memory/2508-20-0x0000000077760000-0x0000000077761000-memory.dmp

    Filesize

    4KB

  • memory/2508-21-0x0000000077750000-0x0000000077751000-memory.dmp

    Filesize

    4KB

  • memory/2508-24-0x00000000775E0000-0x00000000775E1000-memory.dmp

    Filesize

    4KB

  • memory/2508-23-0x00000000776F0000-0x00000000776F1000-memory.dmp

    Filesize

    4KB

  • memory/2508-25-0x00000000775D0000-0x00000000775D1000-memory.dmp

    Filesize

    4KB

  • memory/2508-22-0x0000000077700000-0x0000000077701000-memory.dmp

    Filesize

    4KB

  • memory/2508-17-0x0000000077790000-0x0000000077791000-memory.dmp

    Filesize

    4KB

  • memory/2508-26-0x00000000776E0000-0x00000000776E1000-memory.dmp

    Filesize

    4KB

  • memory/2508-27-0x0000000077640000-0x0000000077641000-memory.dmp

    Filesize

    4KB

  • memory/2508-30-0x00000000776C0000-0x00000000776C1000-memory.dmp

    Filesize

    4KB

  • memory/2508-29-0x00000000777C0000-0x00000000777C1000-memory.dmp

    Filesize

    4KB

  • memory/2508-28-0x0000000004B30000-0x000000000564E000-memory.dmp

    Filesize

    11.1MB

  • memory/2508-32-0x00000000776B0000-0x00000000776B1000-memory.dmp

    Filesize

    4KB

  • memory/2508-33-0x00000000775F0000-0x00000000775F1000-memory.dmp

    Filesize

    4KB

  • memory/2508-35-0x0000000077600000-0x0000000077601000-memory.dmp

    Filesize

    4KB

  • memory/2508-39-0x00000000775B0000-0x00000000775B1000-memory.dmp

    Filesize

    4KB

  • memory/2508-40-0x0000000004B30000-0x000000000564E000-memory.dmp

    Filesize

    11.1MB

  • memory/2508-48-0x0000000002350000-0x0000000002431000-memory.dmp

    Filesize

    900KB

  • memory/2508-47-0x0000000077630000-0x0000000077631000-memory.dmp

    Filesize

    4KB

  • memory/2508-46-0x0000000077680000-0x0000000077681000-memory.dmp

    Filesize

    4KB

  • memory/2508-49-0x0000000004B30000-0x000000000564E000-memory.dmp

    Filesize

    11.1MB

  • memory/2508-50-0x0000000000400000-0x000000000046A000-memory.dmp

    Filesize

    424KB

  • memory/2508-51-0x0000000005650000-0x0000000005669000-memory.dmp

    Filesize

    100KB

  • memory/2508-52-0x0000000005670000-0x00000000056F7000-memory.dmp

    Filesize

    540KB

  • memory/2508-53-0x0000000005700000-0x0000000005745000-memory.dmp

    Filesize

    276KB

  • memory/2508-54-0x0000000005890000-0x0000000005963000-memory.dmp

    Filesize

    844KB

  • memory/2508-55-0x0000000004B30000-0x000000000564E000-memory.dmp

    Filesize

    11.1MB

  • memory/2508-56-0x0000000077670000-0x0000000077671000-memory.dmp

    Filesize

    4KB

  • memory/2508-57-0x0000000005980000-0x0000000005981000-memory.dmp

    Filesize

    4KB

  • memory/2508-58-0x00000000059B0000-0x00000000059B1000-memory.dmp

    Filesize

    4KB

  • memory/2508-71-0x0000000005890000-0x0000000005963000-memory.dmp

    Filesize

    844KB

  • memory/2508-70-0x0000000005670000-0x00000000056F7000-memory.dmp

    Filesize

    540KB

  • memory/2508-72-0x0000000006110000-0x0000000006173000-memory.dmp

    Filesize

    396KB

  • memory/2508-69-0x0000000000400000-0x000000000046A000-memory.dmp

    Filesize

    424KB