Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    0s
  • max time network
    112s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    31/12/2023, 02:46

General

  • Target

    250a366bd4bd46cfeea2fc5c79e35433.exe

  • Size

    874KB

  • MD5

    250a366bd4bd46cfeea2fc5c79e35433

  • SHA1

    fb4405c6a51bb3a02bd458518ac592dbda7d62f1

  • SHA256

    47fc582178e466d3e8dded0268f6a00ae20e05ea1171a9d39d311a373db893c0

  • SHA512

    0e94d7d79a3c202249d9422beb6d435691cce15c4703afd137620a2e60fa3ff42ee509d560d689c9f62a64040c6d12f85e8ad2f48a6714aae0b4a314b07c8b6c

  • SSDEEP

    24576:d8FCKFnw3lfd6nOEA78bEmmhR8WC87GRkW/3sSdfVMSit:d8FCYw3lfwnuQbE/RHIrdtMS

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\250a366bd4bd46cfeea2fc5c79e35433.exe
    "C:\Users\Admin\AppData\Local\Temp\250a366bd4bd46cfeea2fc5c79e35433.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1996

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1996-0-0x0000000000400000-0x00000000006AD000-memory.dmp

    Filesize

    2.7MB

  • memory/1996-1-0x0000000000A00000-0x0000000000A01000-memory.dmp

    Filesize

    4KB

  • memory/1996-9-0x0000000000400000-0x00000000006AD000-memory.dmp

    Filesize

    2.7MB

  • memory/1996-11-0x0000000000A00000-0x0000000000A01000-memory.dmp

    Filesize

    4KB