Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
142s -
max time network
159s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
24/01/2024, 21:28
General
-
Target
72e5e264cb7a9d228f28d450b732b763.exe
-
Size
703KB
-
MD5
72e5e264cb7a9d228f28d450b732b763
-
SHA1
725b2996377e73c04ddce0c92727883bc884012e
-
SHA256
b4b4c0fae7a62ae18d37360e9c240d6e8ef8d544670536fa24fcd73e2e95a61d
-
SHA512
56c5f673c0de529eaa4f0d153d98695feecfec50377611c33aaa762e64599f64758a49f70c040f4a7763afbf068e9f9957a52b95c4e97c5667ed966d4e7c9d4c
-
SSDEEP
12288:lwh9ZiF06LPpMSaP0WaoeVTLB4jgB8iVFjNeu7uDGZdR9dI7o/PmH4E+YgSkj1bT:w/A06CbgTHB1VFjvwGZLIU/PmHpIZ1bT
Score
10/10
Malware Config
Signatures
-
BluStealer
A Modular information stealer written in Visual Basic.
-
Program crash 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\72e5e264cb7a9d228f28d450b732b763.exe"C:\Users\Admin\AppData\Local\Temp\72e5e264cb7a9d228f28d450b732b763.exe"1⤵
- Suspicious use of SetWindowsHookEx
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4936 -s 5282⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 4936 -ip 49361⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1024KB
-
Filesize
476KB
-
Filesize
47.3MB
-
Filesize
47.3MB
-
Filesize
476KB