Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    144s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    26/03/2024, 21:09

General

  • Target

    e019c7aaec421acc773cf9c7a4d70b60.exe

  • Size

    2.8MB

  • MD5

    e019c7aaec421acc773cf9c7a4d70b60

  • SHA1

    fd8a4718b6acb9afa18f4adadbab52e901ecdf78

  • SHA256

    f36cbde73fdbf00fd592e440bb4c8b9f3c49ff3dab187e595e3c680080279484

  • SHA512

    042de017699160c895477efda5be2c342b7e2d0da321ecef29313e6907c860c3e59236747da7a4e5d1da8bb82d901b0017932dea6bf6ddb59453eb929cb6dbd8

  • SSDEEP

    49152:OoaqyTeR2XiSCM0ki8NHRj3sDyqdWpNaJH9suRncJhHcMCwg0jT:UTFiixj3NNa4upcJOwZ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\e019c7aaec421acc773cf9c7a4d70b60.exe
    "C:\Users\Admin\AppData\Local\Temp\e019c7aaec421acc773cf9c7a4d70b60.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: GetForegroundWindowSpam
    PID:2992

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2992-0-0x0000000000250000-0x0000000000251000-memory.dmp

    Filesize

    4KB

  • memory/2992-1-0x0000000003770000-0x0000000003771000-memory.dmp

    Filesize

    4KB

  • memory/2992-2-0x0000000000400000-0x00000000006F5000-memory.dmp

    Filesize

    3.0MB

  • memory/2992-4-0x0000000000250000-0x0000000000251000-memory.dmp

    Filesize

    4KB

  • memory/2992-5-0x0000000003770000-0x0000000003771000-memory.dmp

    Filesize

    4KB