Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

5

Static

static

5

DHL_AWB#60...91.exe

windows7-x64

1

DHL_AWB#60...91.exe

windows10-2004-x64

5

Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    08/04/2024, 10:30

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    DHL_AWB#6078538091.exe

  • Size

    1.2MB

  • MD5

    1f474a80ef53faf305ef6e0c1f3c6eab

  • SHA1

    9b6d4d236f6a6c71440ec81dc18d97ad6d8a8c9f

  • SHA256

    ccc2d47913200e1b73cc2195fd00798181dc8ef052aae7ae6b6df00ae45e6ea7

  • SHA512

    2e5b5d4d5abe683d1e1aa67cadf654da2287e2aafd0ad8d5dcd2e5991005e3439ccacfc412e7a5f22fe7d0b9286526301ece39fe7eb04b54fa79eba131e91a10

  • SSDEEP

    24576:2qDEvCTbMWu7rQYlBQcBiT6rprG8adcAw3Mr7lVFTdxBB:2TvC/MTQYxsWR7ad7hlrd

Score
1/10

Malware Config

Signatures

  • Suspicious use of FindShellTrayWindow 2 IoCs
  • Suspicious use of SendNotifyMessage 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\DHL_AWB#6078538091.exe
    "C:\Users\Admin\AppData\Local\Temp\DHL_AWB#6078538091.exe"
    1⤵
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    PID:2072

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\caulds
    Filesize

    252KB

    MD5

    c487ed89f1f02a1e9bb5069d654d135e

    SHA1

    bac4a49aa86bb0a7ff7a91bbc9b6e7c5fc5c640f

    SHA256

    db4d116e4fcd6320f433f2452f044857c1a0038901ca5ed89df17ac38672fdf3

    SHA512

    baf888c4688dc8a92f297c696e991456cab056565ace58de4ad95b82d13881d997a133c6285bb93a4fc4be4ed4f7477927a8717aeb7cf8927f76629684b8a7b3

    Download Submit

  • memory/2072-11-0x0000000000120000-0x0000000000124000-memory.dmp

    Filesize

    16KB

    Download