Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    10/04/2024, 08:09

General

  • Target

    dd99df6ca43a1d7e1004b37b0816d6b13c3390e3ebf5f3e65004a1d54d12593a.exe

  • Size

    2.3MB

  • MD5

    f122ee8eece052c632bb5d3f8b77dd57

  • SHA1

    021b713f068ead3b2177c9c36e250f71ec3ee018

  • SHA256

    dd99df6ca43a1d7e1004b37b0816d6b13c3390e3ebf5f3e65004a1d54d12593a

  • SHA512

    3b345d609a348dee1330f41f7e4caa963530ecec6eceb80cb3e9283c1133997bcef6218a64a034eed050a4e18e6bb5441908e7fa934e6136211256fcf52c4e50

  • SSDEEP

    49152:MxdKjS1/5hTOtvqRSV0DvkgIfMTy69ffZU/l4YBa5k6:MxAS1xh61qRSyDvFIyy69ffZU/lVg5n

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\dd99df6ca43a1d7e1004b37b0816d6b13c3390e3ebf5f3e65004a1d54d12593a.exe
    "C:\Users\Admin\AppData\Local\Temp\dd99df6ca43a1d7e1004b37b0816d6b13c3390e3ebf5f3e65004a1d54d12593a.exe"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    PID:936

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads