Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

15ea4e8485...99.exe

windows7-x64

7

15ea4e8485...99.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 10:28

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    15ea4e8485e6e9473f7fcf98a6fdba99.exe

  • Size

    32KB

  • MD5

    15ea4e8485e6e9473f7fcf98a6fdba99

  • SHA1

    f82b73c7695d4c4dafb6519f1a5903145e1d2b4d

  • SHA256

    95e2b6edf48c60ac6f91233afbc552b8ba33d692857e537b684b949fe3b30165

  • SHA512

    1eb1fe0abfc65b3bcd82419603de2b2ec5614dd048612b6b40fa80a9df3b5b46ce2d494bb966be587cf3430c3baf1546e9aa075a56fa0b8283c12d4cc42d6aa3

  • SSDEEP

    384:nc5CntggBaSxRylgnkfmKmZX6Cccn3er6+XjnKyM9PZbj:c5CNQiRylekfmKmZK5c3er6+nKHZP

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\15ea4e8485e6e9473f7fcf98a6fdba99.exe
    "C:\Users\Admin\AppData\Local\Temp\15ea4e8485e6e9473f7fcf98a6fdba99.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:2468

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\259400802j08.dll
    Filesize

    15KB

    MD5

    a32d77ce927e9c44bdfdf25db2505786

    SHA1

    45e693eb8dd52548e77675bde7bdd4742f6917ac

    SHA256

    2c556d41ea1f44198e177774665cb40b7d724441fab2836c28288b56d2e3fa32

    SHA512

    3d4edf4c9b4377f6e884b7bbfaed13d958de749702795f3910c0e9239494e1ce840ffc2f4c20dadb64948c6714465ee1010520a3788e979155ca0e37e6a52f83

    Download Submit