Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

1

Static

static

1

15e88b6196...74.exe

windows7-x64

1

15e88b6196...74.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 10:28

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    15e88b619654a48923d2cecce17a9e74.exe

  • Size

    652KB

  • MD5

    15e88b619654a48923d2cecce17a9e74

  • SHA1

    a86b2a1a84d42ded3d73c936772676cc9965bce9

  • SHA256

    746910738ba90ca42cb156fea36e7daa4167805101c7bd6c074f715df1c8c179

  • SHA512

    754a90b88e9934468d5b5a564717266fe5414f99715da6079169d49085b0360f149ecc1287b9458d595bd17d963c6db7c65409a951b07dd7d3a29811f7f86629

  • SSDEEP

    12288:kxfDgKX67CwIz1IZOYo4p7JYgcoI20DpBz4aKo/zUfpfsHfLdoopc0:kxMKsCwIz1IZOYo4RJYgcoxWSaKo/Esl

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\15e88b619654a48923d2cecce17a9e74.exe
    "C:\Users\Admin\AppData\Local\Temp\15e88b619654a48923d2cecce17a9e74.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:3032

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\offconfig.temp
    Filesize

    579B

    MD5

    31f4bddf6dfdccdaa645f9b797a2da0e

    SHA1

    7c7e558f6f89a6ded36db75e7297feb2bfac13cd

    SHA256

    1ff419f6a15a13a1c0f506bfef4db150794679b0f0faf5680c748e614b08b244

    SHA512

    2dcf6e53fd253c423a218cb7159f482cf23d2033fd66a6b9c301e515969f26b805129a5752f377ba05dc16bc60e51b6024aa91485207912cc1b47db197da1308

    Download Submit