Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

1

8fedc00599...38.exe

windows7-x64

7

8fedc00599...38.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    121s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    04/02/2024, 19:10

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    8fedc005992bda5677da22a501035c38.exe

  • Size

    12.2MB

  • MD5

    8fedc005992bda5677da22a501035c38

  • SHA1

    e886a2d45c0684302b1bf20bc12cce41845cda1e

  • SHA256

    184779f885631aae6c131ca1973ea6ce97ab6b6c16c3bd2a32032e604f242a15

  • SHA512

    61d096173eb669ab4d0da6855dd34cb5dc482c96dada5904efa9b7f6a7de05d2408134dac3351e88f0cd5dbb3ffc9edb83b09c0bd4caa8b8de1ed28896902054

  • SSDEEP

    196608:Bpaefu299IxzDssebkrnYBuqMC0v/AKTj7AHA3pyeaa1VcwmBfDNfO6cMpr1r3mH:Bpw2+zA/1T0vD7D3QrdBbNXt34R

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\8fedc005992bda5677da22a501035c38.exe
    "C:\Users\Admin\AppData\Local\Temp\8fedc005992bda5677da22a501035c38.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of SetWindowsHookEx
    PID:2420

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\N7PqCpohzM\7z.dll
    Filesize

    170KB

    MD5

    31cad6a3edd1c32981ad6b565cbeac94

    SHA1

    9338978c85a9423ee2a38cba027f79192d684f1b

    SHA256

    b8521abda09ec17ddad36528c1bc50395dc8c5f7c11c026a5b3ff23110c54182

    SHA512

    02e198b8ef192de55db35ae00a16a80b3309a9373a596c20d617b43dd7159a635bc303f371859e704375521a1242d02754807e2e9dfef63ffd06993b24c17d3d

    Download Submit