Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
144s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
-
submitted
19/01/2024, 00:04
General
-
Target
66626d8d6c25aa9973fdabf8615cb540.exe
-
Size
2.4MB
-
MD5
66626d8d6c25aa9973fdabf8615cb540
-
SHA1
546f7bec0ef92f4a33f4f107ea6d9577f5b7aca1
-
SHA256
647c2e386f270092390c1efa98f3eb320b182dd1f6cda5b5307924fc1f7b3bc6
-
SHA512
cfb71bd589065d4476e8b5fa20c6a2e83e897f8eb9ee6a6ad33b27de0edfc19546b042326e153e50bbab6d07707b9b4f075b7f4802b4664ba06a347d9f2a1b5b
-
SSDEEP
49152:CcnluoGH7iRnQmAglRsCy3hv8YV9m5oj0MUL:CcEt74bzsh98YV9rLS
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Suspicious use of NtSetInformationThreadHideFromDebugger 14 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\66626d8d6c25aa9973fdabf8615cb540.exe"C:\Users\Admin\AppData\Local\Temp\66626d8d6c25aa9973fdabf8615cb540.exe"1⤵
- Adds Run key to start application
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
6.4MB
-
Filesize
6.4MB
-
Filesize
6.4MB
-
Filesize
6.4MB
-
Filesize
6.4MB
-
Filesize
6.4MB
-
Filesize
4KB
-
Filesize
6.4MB
-
Filesize
4KB
-
Filesize
6.4MB