Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

cd1dc661dd...f5.exe

windows7-x64

7

cd1dc661dd...f5.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    141s
  • max time network
    168s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    16/03/2024, 04:32

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    cd1dc661dd352fbd865fec7d974cb8f5.exe

  • Size

    346KB

  • MD5

    cd1dc661dd352fbd865fec7d974cb8f5

  • SHA1

    2f5c5074bfc7daacc0ced1ce6f7202e2a6a62b15

  • SHA256

    66e345b752b2f76aed547c7949c6212faab0969b60dd610af95fe2a76b9d744a

  • SHA512

    f56cf479d757aea909cbbc78865d4ae12ecd7f2c581b416292907593aed00f41f4af4a86b71d316dd3ddf50a391c9fe602d39a4419d58fb9f3452dd0a989ddbf

  • SSDEEP

    6144:IJ21vGt1JEU1//vQr4yyxM9p81yUxU/aDh5P+sGdTqf0sde16bR//LSUuGJ7eeFK:IJ2JGxEg/PZMT81yp/aDz2Mf0sY16bRK

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 5 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\cd1dc661dd352fbd865fec7d974cb8f5.exe
    "C:\Users\Admin\AppData\Local\Temp\cd1dc661dd352fbd865fec7d974cb8f5.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1728
  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1312 --field-trial-handle=2284,i,9807419199535700662,2319175108930815708,262144 --variations-seed-version /prefetch:8
    1⤵
      PID:2964

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Temp\data\bbtvconfig.ini
      Filesize

      238B

      MD5

      c189259451e4b4fd074991f3c8464a44

      SHA1

      4e8fc37f17d64a7e0187b94edd9e065b85333e8b

      SHA256

      99773670e555b7d4f4b6c2379c91b97c219fb75fdeff23be2975536803be2944

      SHA512

      c01fffad7c4f25a97d41e0d64b1ea775ced722f3c487166cf3c0bff850bb754d2166927966d6b19ef7fbe3b934ed068bc72dd828cf4eb0f9ca397d883c7dd09b

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\data\bbtvconfig.ini
      Filesize

      275B

      MD5

      e2146cb948974bb30b71ab01a39cf6b3

      SHA1

      e0c3bc526213732b9209812c0a3fbd0579a9c13e

      SHA256

      03572c5098093680c2b9904b085d4709818e77bcd8c9a4b3c68c4a074b9109d9

      SHA512

      f0c2e21fe86cc4246e2f7e1a410cd857fe34a3f1ab73612a184069c280761788bf9cd5bda4a09a3ffe147380021e09fce202cefc90a9b8543e35f6a501640a95

      Download Submit

    • memory/1728-0-0x0000000000400000-0x0000000000500000-memory.dmp

      Filesize

      1024KB

      Download

    • memory/1728-1-0x0000000000400000-0x0000000000500000-memory.dmp

      Filesize

      1024KB

      Download

    • memory/1728-29-0x0000000000400000-0x0000000000500000-memory.dmp

      Filesize

      1024KB

      Download

    • memory/1728-42-0x0000000000400000-0x0000000000500000-memory.dmp

      Filesize

      1024KB

      Download

    • memory/1728-48-0x0000000000400000-0x0000000000500000-memory.dmp

      Filesize

      1024KB

      Download