Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

4b80cdc8d1...98.exe

windows7-x64

7

4b80cdc8d1...98.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    0s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    08/01/2024, 13:00

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    4b80cdc8d14d97440f242688f7ef5398.exe

  • Size

    1.1MB

  • MD5

    4b80cdc8d14d97440f242688f7ef5398

  • SHA1

    85a47cf0886da147f6522f25745f18d5defa7c5a

  • SHA256

    fbdf7d77c581ae66a5da7de304c534cc850fccfaec6a876345753ec4bdfa3234

  • SHA512

    e83e869f0228d8a8991f6c400f73bff51d2f6ab9686ff2047d5563b77cc91494eb2f811e3331068e3382be76c83f547d89b2f18d9af854cf1fa8fed9721de74f

  • SSDEEP

    24576:USpGgFAnifDPTIrkZ1hZR9XWpTYtE1pj/fijjK+BF5H78:USYgiiDTIrIHZPoTVXj/QO+n5b8

Score
7/10
vmprotect

Malware Config

Signatures

  • VMProtect packed file 3 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\4b80cdc8d14d97440f242688f7ef5398.exe
    "C:\Users\Admin\AppData\Local\Temp\4b80cdc8d14d97440f242688f7ef5398.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2872
    • C:\Program Files\Internet Explorer\iexplore.exe
      "C:\Program Files\Internet Explorer\iexplore.exe" www.tt336.com
      2⤵
        PID:2600
        • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
          "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2600 CREDAT:17410 /prefetch:2
          3⤵
            PID:116

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/2872-0-0x0000000000400000-0x000000000073D000-memory.dmp

        Filesize

        3.2MB

        Download

      • memory/2872-1-0x0000000000400000-0x000000000073D000-memory.dmp

        Filesize

        3.2MB

        Download

      • memory/2872-172-0x0000000000400000-0x000000000073D000-memory.dmp

        Filesize

        3.2MB

        Download