Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    16/03/2024, 04:32

General

  • Target

    cd1dc661dd352fbd865fec7d974cb8f5.exe

  • Size

    346KB

  • MD5

    cd1dc661dd352fbd865fec7d974cb8f5

  • SHA1

    2f5c5074bfc7daacc0ced1ce6f7202e2a6a62b15

  • SHA256

    66e345b752b2f76aed547c7949c6212faab0969b60dd610af95fe2a76b9d744a

  • SHA512

    f56cf479d757aea909cbbc78865d4ae12ecd7f2c581b416292907593aed00f41f4af4a86b71d316dd3ddf50a391c9fe602d39a4419d58fb9f3452dd0a989ddbf

  • SSDEEP

    6144:IJ21vGt1JEU1//vQr4yyxM9p81yUxU/aDh5P+sGdTqf0sde16bR//LSUuGJ7eeFK:IJ2JGxEg/PZMT81yp/aDz2Mf0sY16bRK

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\cd1dc661dd352fbd865fec7d974cb8f5.exe
    "C:\Users\Admin\AppData\Local\Temp\cd1dc661dd352fbd865fec7d974cb8f5.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2340

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\data\bbtvconfig.ini

    Filesize

    275B

    MD5

    e2146cb948974bb30b71ab01a39cf6b3

    SHA1

    e0c3bc526213732b9209812c0a3fbd0579a9c13e

    SHA256

    03572c5098093680c2b9904b085d4709818e77bcd8c9a4b3c68c4a074b9109d9

    SHA512

    f0c2e21fe86cc4246e2f7e1a410cd857fe34a3f1ab73612a184069c280761788bf9cd5bda4a09a3ffe147380021e09fce202cefc90a9b8543e35f6a501640a95

  • C:\Users\Admin\AppData\Local\Temp\data\bbtvconfig.ini

    Filesize

    238B

    MD5

    c189259451e4b4fd074991f3c8464a44

    SHA1

    4e8fc37f17d64a7e0187b94edd9e065b85333e8b

    SHA256

    99773670e555b7d4f4b6c2379c91b97c219fb75fdeff23be2975536803be2944

    SHA512

    c01fffad7c4f25a97d41e0d64b1ea775ced722f3c487166cf3c0bff850bb754d2166927966d6b19ef7fbe3b934ed068bc72dd828cf4eb0f9ca397d883c7dd09b

  • memory/2340-0-0x0000000000400000-0x0000000000500000-memory.dmp

    Filesize

    1024KB

  • memory/2340-45-0x0000000000400000-0x0000000000500000-memory.dmp

    Filesize

    1024KB