Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

hamsterballsetup.exe

windows7-x64

7

hamsterballsetup.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    149s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240221-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24/02/2024, 20:35

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    hamsterballsetup.exe

  • Size

    6.5MB

  • MD5

    a52c341f23be100b9f5029711093e8cf

  • SHA1

    d9318c917c71e119c1505521dea88833a61905c6

  • SHA256

    7cea668e88130102c3bfbb870ef5c624fda3339a98b02402983c761d1397c0b9

  • SHA512

    dcaf10f8985b0f81d27c93831a58297b7232f77e57ef0040805aaf7ec159fad979e2f1a619ff6df0a500158e998ad2e9f76eadea9c3dedd14111a96e70855e74

  • SSDEEP

    196608:oxBMD4dMv8L8MQLVfu7XTzw5lZXQ8EGyn5Iqwqz:oxKD4dL8MQs7XTzw5laBGynSE

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\hamsterballsetup.exe
    "C:\Users\Admin\AppData\Local\Temp\hamsterballsetup.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:2164

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\popcfg2\files.cab
    Filesize

    6.3MB

    MD5

    6b1c52159b2ab85b3ca09f21847e3aea

    SHA1

    769b767b87eb21f6e68b6fcdda6839c6d5f48c4e

    SHA256

    c72cb7f9f733403f276fe34ea2963d238d4ae60521a1b09f68d159c740c06fd2

    SHA512

    547353aa6946b45dbde6438004bb75e3c3a2a0734f55b09c9e89e54bd0faa3be05e58852dab03a1c064aef040280aff623f1bbca1d5b94830580bd51cc09109c

    Download Submit