Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
25/02/2024, 07:16
Static task
static1
Behavioral task
behavioral1
Sample
a330cc9c36023a1cffa7a4a429f9acad.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a330cc9c36023a1cffa7a4a429f9acad.exe
Resource
win10v2004-20240221-en
General
-
Target
a330cc9c36023a1cffa7a4a429f9acad.exe
-
Size
52KB
-
MD5
a330cc9c36023a1cffa7a4a429f9acad
-
SHA1
3abd74e1831232ff500f779e34b6d232f9b93521
-
SHA256
a55f013e5b26c6f95dc18d121d32d2fd14cadcb2b40f775b504820b7f88b7520
-
SHA512
1b991ce33bda010a2b14b816de76208686de6a8e6c35e8d0f75be577f040b5a64af7a8a4edd8d7210504ccb43bbb09c52a8939da7230ef2a68813410ea1e489e
-
SSDEEP
384:ShonJlxkGx3p3Wa1N0P0BJGiZ3HTA25NmKJAprnXiGsGfLbt1OEtuIRmVDEWyORZ:cWkGzGuBBZl45XWJ6ZOMU
Malware Config
Signatures
-
Script User-Agent 2 IoCs
Uses user-agent string associated with script host/environment.
description flow ioc HTTP User-Agent header 3 Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) HTTP User-Agent header 4 Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2372 a330cc9c36023a1cffa7a4a429f9acad.exe 2372 a330cc9c36023a1cffa7a4a429f9acad.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
171KB
MD59c0c641c06238516f27941aa1166d427
SHA164cd549fb8cf014fcd9312aa7a5b023847b6c977
SHA2564276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f
SHA512936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06