Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
25/01/2024, 03:10
General
-
Target
e8462572c325e8ce44d52237af164270.exe
-
Size
387KB
-
MD5
e8462572c325e8ce44d52237af164270
-
SHA1
728be6dfb105688d723d7e85d346669a45abd275
-
SHA256
89f3641d7cb31f7755fd8d74d293c4e36f1e24a198c864a5b2b8d53e86f5f23b
-
SHA512
04eaabce1622f84bf970280860382fb1d33348567698d799d8616c4f8d5e5140035f56800bb1a5d2ef336cd4fbc3c68380089c038b55243f66e9a7e42d899143
-
SSDEEP
12288:SplrVbDdQaqdS/ofraFErH8uB2Wm0SXsNr5FU:exRQ+Fucuvm0as
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\e8462572c325e8ce44d52237af164270.exe"C:\Users\Admin\AppData\Local\Temp\e8462572c325e8ce44d52237af164270.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\agreements\within.exe"C:\Program Files\agreements\within.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
387KB
MD579f3cb5e3492425d151cb383972bde2a
SHA12612f063cb5985beb82e6caeafc02760c46806a8
SHA256179b7d1cb33325344f78d94e8bb61a9733bd8d89088ded65f656caa3d18514d2
SHA512789e1370c4421a6d71e1075933f32e7fd37835c4949ee2bcf133cef88f256949d15dfecef2ec5506bdb641b8bac623d0b8c022a0504ff8d98b79fd275fdc555b
-
Filesize
325KB
MD5837aee296da8f2bea4cf2162dc3ffba3
SHA1b2da2de9446b4d9b6dd41b219cf60a95faa3d6c0
SHA256a90f3ed7dce71ff98f13ac4bb55043b5efc1f77543cb5aaf0e4f7b7f047c8e72
SHA512b4931cfead7ad0971f903e6c45468ed7e1904c95f39f589a1874734a529a2b5f6b6e2ff54cdd6011ddca89de9214264adbed3893d8329c9b1008cf0a420039b1