Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

thurs22.exe

windows7-x64

7

thurs22.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    118s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    26/03/2024, 08:58

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    thurs22.exe

  • Size

    21.2MB

  • MD5

    b77b92a3420d1ab71a2b61554fd1c959

  • SHA1

    74365281c10c1a9c63bf2eb7a921932b82c97b70

  • SHA256

    674605c5829a581dc893c10f5bb297eb5118b407c0faae11285e4347d5c97619

  • SHA512

    ce4e749e1aff8b0fed4fd37f000f0de5b3deb5fac670c29fa8bf55d68f1320de8dcb91b899580748d24d49cfa25b67a8ca8ec5859555a3da1f1388b5ab60b9bf

  • SSDEEP

    393216:LEkZQtsAMP8AxYDX1+TtIiFA/IFckr5bguH0Dl:LhQtsA/X71QtIP/IndcBDl

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 21 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\thurs22.exe
    "C:\Users\Admin\AppData\Local\Temp\thurs22.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2900
    • C:\Users\Admin\AppData\Local\Temp\thurs22.exe
      "C:\Users\Admin\AppData\Local\Temp\thurs22.exe"
      2⤵
      • Loads dropped DLL
      PID:2772

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\_MEI29002\VCRUNTIME140.dll
    Filesize

    116KB

    MD5

    be8dbe2dc77ebe7f88f910c61aec691a

    SHA1

    a19f08bb2b1c1de5bb61daf9f2304531321e0e40

    SHA256

    4d292623516f65c80482081e62d5dadb759dc16e851de5db24c3cbb57b87db83

    SHA512

    0da644472b374f1da449a06623983d0477405b5229e386accadb154b43b8b083ee89f07c3f04d2c0c7501ead99ad95aecaa5873ff34c5eeb833285b598d5a655

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_MEI29002\api-ms-win-core-file-l2-1-0.dll
    Filesize

    2KB

    MD5

    4a18beda5038c5203993191431b98d62

    SHA1

    facba10698a89a42c0e419bac056366e809dedc0

    SHA256

    3144bccc1385efc1ff204442a5aecc0a990776341a268fad15aa605449fca04a

    SHA512

    fd4a1963babe134202c5b9c97b8a83c0dc1c7e58f04a5cb12f6ccf7ae6ac41f13303fb3d01052e2b670805a7e2d21c193ee888e98e68054dd52b9bdc636a7597

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_MEI29002\api-ms-win-core-localization-l1-2-0.dll
    Filesize

    4KB

    MD5

    3018f5b28a9e26395b7933ebcfd6f40c

    SHA1

    ea38f03430f1a54e9b37e9694eabc7487b6e7201

    SHA256

    0c62b8ab1e5f30d4a9eadcd412677e0ab5e4e9304f0870a4ee562f08d09ccc7e

    SHA512

    f9a81f4565d083f30049ee8e4c4da996ba86c7c20e58d3dcd102eb41ab58c6d94941545ea2ee3aa538d352847efdd84376144ff852bdef4ea3c54dab4e5ced47

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_MEI29002\api-ms-win-core-path-l1-1-0.dll
    Filesize

    3KB

    MD5

    2cd77f6e2fa6a502e352369426eae1c1

    SHA1

    abb54114f3677944af582afb6ea1f4a7785537c8

    SHA256

    e39ca111d81e6e5d90cf13fa0aee525d8a2740b84d2c5cd378dd69e4f79f8b0f

    SHA512

    47d47a49b8f89f64bd0d4bda344456784e8b0721f9ba32ce3b88e6dd5bec06bfb781dc44495ac17b4c50dfe679e1d18594fa91ccdfa26bed055a2c4a5c7c2906

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_MEI29002\api-ms-win-core-processthreads-l1-1-1.dll
    Filesize

    4KB

    MD5

    004f7f67994de33959d6480ef4d4f515

    SHA1

    76e83db625d504d1feec5dec918552f9ec51c4c3

    SHA256

    053a83b3f8ac76232952bdb8fb5c5067f06ba48f82b474829c25326adbd26361

    SHA512

    d187950683c79b1dffe4432fb476071a203cb14d7987377f71538b81fd36077f181fb7d64e9e4e30099f239764e6cbb501b65c095cd4532bc0b2ab9fbd7755a3

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_MEI29002\api-ms-win-crt-conio-l1-1-0.dll
    Filesize

    12KB

    MD5

    ed14b64c94f543974b7fdc592fa0594b

    SHA1

    dc66ca3de44c021d89ebd5160c447aaedc565514

    SHA256

    9165248996814b72f6a334750e65994b39f971267ffc95f759e529356fa3125c

    SHA512

    5d20bedcfb8d2f603b3f27d874a9e0e3a7ca7df4809aab52b02af630c0037b37923536cc93c78c9deb014df28e378d16d67e99688f8b656e3e7bfd1e2e914dcc

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_MEI29002\api-ms-win-crt-convert-l1-1-0.dll
    Filesize

    15KB

    MD5

    1908861649e67cdc20c563c234a89914

    SHA1

    471ae3b9a3b40e63c880362892865ecf8bd80f67

    SHA256

    4aea1cedd976ef15a47a3433f3a2e176b1c5e495a54497dba27247b35a1b8449

    SHA512

    dec24d5c3f31c90cbec3810290506309a1db5677022c600d3bdd2e92b73078dc6353023f2aeefa408aceac7c9f7ed5a2ff07a399b446e177ff93e5fa1b3f9353

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_MEI29002\api-ms-win-crt-locale-l1-1-0.dll
    Filesize

    11KB

    MD5

    761ddd8669a661d57d9cf9c335949c06

    SHA1

    251bbcad15771d80492f1deb001491a7abb6c563

    SHA256

    fe51064e0728d553d0f3e96967671f7e6ae4ebd35d821679292014dd4c3bb8e3

    SHA512

    5ad590a5f81532f8bf21fb4f62bc248e71bbf657dfb1720b2d9f1628033afe39426a1c27a89d9a06e50849bd0ed2242afa93e4cf2bc83f03a922b8204f0f4f2a

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_MEI29002\api-ms-win-crt-math-l1-1-0.dll
    Filesize

    20KB

    MD5

    56556659c691dd043dbe24b0a195d64c

    SHA1

    117b9a201d1e8bb9e5fadeae808141d3fa41fb60

    SHA256

    2e1664e05c238d529393162f23640a51def436279184d2e2c16cfbf92ab736c1

    SHA512

    a8d4c4a24e126c62b387120bae0edd5cbce6d33b026590ff7470d72eb171ffe62b8b2b01e745079c9a06cf1eb78a166707514715e17bbd512981792a1d2127e0

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_MEI29002\api-ms-win-crt-process-l1-1-0.dll
    Filesize

    12KB

    MD5

    6631c212f79350458589a5281374b38b

    SHA1

    88be6865aac123ffbdafec32a6fba34a26428875

    SHA256

    52cc325a4c2158b687c95f9702f4be2e3ec41c80207e50f252f5620ba1784649

    SHA512

    e53d7bfa2639efccdb66d37957972fd1f8eb2beea3a81145588ed622501ee50261e05a06611ee7126564b11a5301b109f295d062f1a2dc1e44a2847000fd7298

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_MEI29002\api-ms-win-crt-runtime-l1-1-0.dll
    Filesize

    15KB

    MD5

    bbae7b5436d6d1b0fc967ff67e35415f

    SHA1

    f67bc165cefb119ad767b6bec27a1102c0fd2bac

    SHA256

    8150a238851d7da74bc8f6f13262a8d6568373dc509f67544ab6a62398f20c4f

    SHA512

    4201a8edfe303057545d04de683bbdf0acb68cf4d2e894192f899a70398df18299432c0f6caee72d917a986882bbc0585035a9b934d4579f67a1c98cc894dee2

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_MEI29002\api-ms-win-crt-stdio-l1-1-0.dll
    Filesize

    17KB

    MD5

    53e9526af1fdce39f799bfe9217397a8

    SHA1

    f4a7fbd2d9384873f708f1eeaeb041a3fbe2c144

    SHA256

    de44561e4587c588bc140502fd6cd52e5955abeec63d415be38a6d03f35f808f

    SHA512

    8167ee463506fe0e9d145cc4e0dc8a86f1837ae87bc9efe61632fb39ef996303e2f2a889b6b02ff4a201faf73f3e76e52b1b9af0263c6fcfdac9e6ea32b0859f

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_MEI29002\api-ms-win-crt-string-l1-1-0.dll
    Filesize

    17KB

    MD5

    eccf5973b80d771a79643732017cea9a

    SHA1

    e7a28aa17e81965ca2d43f906ed5ab51ac34ee7c

    SHA256

    038b93e611704cc5b9f70a91ebf06e9db62ef40180ec536d9e5ab68eb4bb1333

    SHA512

    b95f5efc083716cb9daba160b8fa7b94f80d93ab5de65a9fb0356c7fb32c0d45fe8d5d551e625a4d6d8e96b314bae2d38df58b457b6ced17a95d11f6f2f5370e

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_MEI29002\api-ms-win-crt-time-l1-1-0.dll
    Filesize

    13KB

    MD5

    090dd0bb2bddee3eaae5b6ff15fae209

    SHA1

    ddc5ac01227970a4925a08f29ba65eb10344edb1

    SHA256

    957177c4fe21ae182dfe3a2a13a1ff020f143048fc14499ae9856e523605083e

    SHA512

    2e0b8567231e320b2e52af3b86047cfab16824e2db1d1bb17bafe7a1c6c5f0bf62d76656206a3d7ef1d3849b479bf5e09db1f0f4e4cd0aa2df09838d35c877f3

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_MEI29002\base_library.zip
    Filesize

    1.4MB

    MD5

    7162e644ce0de91a02e72b15e74108cc

    SHA1

    0daab0982b5d440de5bdc2ded39861c01fe11148

    SHA256

    a23de623620926a94c3ae5cfb5e9db2a9e62117661f49290522a3303662ca24c

    SHA512

    d528c3df4727d3c29d9c32124738db2837997ab397cdaf5c81bb45a222bc5bff84493bff963a5708296669182da3ff48936ffe63d5e333401f769b845e1af69e

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_MEI29002\python311.dll
    Filesize

    5.5MB

    MD5

    d06da79bfd21bb355dc3e20e17d3776c

    SHA1

    610712e77f80d2507ffe85129bfeb1ff72fa38bf

    SHA256

    2835e0f24fb13ef019608b13817f3acf8735fbc5f786d00501c4a151226bdff1

    SHA512

    e4dd839c18c95b847b813ffd0ca81823048d9b427e5dcf05f4fbe0d77b8f7c8a4bd1c67c106402cd1975bc20a8ec1406a38ad4764ab466ef03cb7eb1f431c38a

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_MEI29002\ucrtbase.dll
    Filesize

    971KB

    MD5

    673e62fe0e2778b568f76282ab8634ca

    SHA1

    1b0e0ebf4a8e1f2dab91fb60abb4806938edf2ce

    SHA256

    d4277c54edfeb960b4163f6bec2415297047ed44963cb04c2c91a9e2604f58f6

    SHA512

    9dc37aea23abdf1c00ed98b192921b2339dcaeca64b2970c5e73a177882b3655de04954dc659472dbbbf46aa0442d2b25c2ddef6ad087bed693aa894935da6b3

    Download Submit

  • \Users\Admin\AppData\Local\Temp\_MEI29002\api-ms-win-core-file-l1-2-0.dll
    Filesize

    4KB

    MD5

    cb3e0dd38c444938ce1c189aadd29a3f

    SHA1

    45b985ccd1d30c67c757580d4e9abe6ca7be4dd7

    SHA256

    b2d983883afd758913a7db54222a2db4bfeb1051b0c0f92e8faae93c0bc90fc4

    SHA512

    cde637e676819a05cfe6f757bcb6a1aca72bd7d4422e7cedfbf9d8ba42b47eac7868a821fce93e6d0f1de20672a8de7362f9dba0066db812c74e060134fc293e

    Download Submit

  • \Users\Admin\AppData\Local\Temp\_MEI29002\api-ms-win-core-timezone-l1-1-0.dll
    Filesize

    3KB

    MD5

    a84f802749ae5a0aa522f203ece20b7f

    SHA1

    3c631ce4107b2ffc9a4a06c16d41d7d0ea0a9b2f

    SHA256

    e4d28023eca5bd147ac645048b18bd7272735da10c30c2dbc83cd1c96703d869

    SHA512

    52b68a300ae56eb8a3b3f811cc7368afe5d4f1e8ee37b6fdae0878978952041bd5467eaaaec23aab12c1735ed3afd8134b2171b633ee1dae3b159e99d765a71d

    Download Submit

  • \Users\Admin\AppData\Local\Temp\_MEI29002\api-ms-win-crt-environment-l1-1-0.dll
    Filesize

    11KB

    MD5

    af851dfd0d9fecb76ff2b403f3c30f5b

    SHA1

    30f79fb4d4c91af847963c46882d095d1f42efbe

    SHA256

    6a3fd4b050f19ec5c53c15544b1f1b1540ac84f6061c0ec353983eb891330fda

    SHA512

    04509b02115ec9b5bc4ee2f90e49e799ccf85884fe1f11f762f0614a96764b8f2b08f96895c467c5b11f20273183096b2bcceb0b769df9d65b56c378cb32b0f5

    Download Submit

  • \Users\Admin\AppData\Local\Temp\_MEI29002\api-ms-win-crt-filesystem-l1-1-0.dll
    Filesize

    13KB

    MD5

    0f143310fade4de116070a3917a79c18

    SHA1

    b9a092e885c73cb6d33c9e17d429ede950cf3a26

    SHA256

    2def5140c289b89c9a27a2112a2cc01ad1a902944c597d6204bed4efbc09ff7a

    SHA512

    f87104272aa2326641e46450a0333626567ab3fa85a89b81f7a7c0b1f90a47a70ea189ce3f6bf5db6bb5cccda6d190fb2276edeb44334245b210e7faca05fc60

    Download Submit

  • \Users\Admin\AppData\Local\Temp\_MEI29002\api-ms-win-crt-heap-l1-1-0.dll
    Filesize

    12KB

    MD5

    f97e7878a2b372291b1269d80327bbf6

    SHA1

    cee6f776fe0aa5a6d4854058f20f675253f48998

    SHA256

    c4e195d297d163a49514847ef166da614499404d28bc9419e3e6a28a8e03e9b6

    SHA512

    475898e60ffc291362fda45ab710b9ddaf1cf5e82f66dfcc04998ded583c54692ecfcac6cc4fe21b32bdd0e4dce8ac32fd9aecca2b0b60f129415180350d7825

    Download Submit