Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    1s
  • max time network
    85s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09/01/2024, 04:17

General

  • Target

    UsbEAm Hosts Editor-v3.63/UsbEAm Hosts Editor v3.63.exe

  • Size

    686KB

  • MD5

    33d613e304e608b25fd6e546d484fcfc

  • SHA1

    68f5d14b015f939de73a40084612c0900b2babc9

  • SHA256

    ece71f334410bd59eb78927e8877237ea3cec84153b856e14bc48ad52ce34035

  • SHA512

    a97124b4230ec651b9ec395189456ac3bf08e791d949036c4e4f158a4b8f4db63b96bb71d1f7efc2351f6880d5b757415e5cefcad203b70d110e59469730f3e2

  • SSDEEP

    12288:ke/wr0yMYAejSj5Fg4/jBK7WhbVH2qn2jud3bruiKMziFKhjVCmp3QeumSVzOsJz:keYLAejq9I7ob92KlbrVdO05CmaV1Jz

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\UsbEAm Hosts Editor-v3.63\UsbEAm Hosts Editor v3.63.exe
    "C:\Users\Admin\AppData\Local\Temp\UsbEAm Hosts Editor-v3.63\UsbEAm Hosts Editor v3.63.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1176

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1176-0-0x0000000000490000-0x0000000000640000-memory.dmp

    Filesize

    1.7MB

  • memory/1176-3-0x0000000000490000-0x0000000000640000-memory.dmp

    Filesize

    1.7MB

  • memory/1176-2-0x0000000000490000-0x0000000000640000-memory.dmp

    Filesize

    1.7MB

  • memory/1176-1-0x0000000000490000-0x0000000000640000-memory.dmp

    Filesize

    1.7MB

  • memory/1176-28-0x0000000000490000-0x0000000000640000-memory.dmp

    Filesize

    1.7MB