Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

Exstora_v_2.1_en.exe

windows7-x64

3

Exstora_v_2.1_en.exe

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

Exstora.exe

windows7-x64

1

Exstora.exe

windows10-2004-x64

1

Uninstall.exe

windows7-x64

7

Uninstall.exe

windows10-2004-x64

7

exstora.chm

windows7-x64

1

exstora.chm

windows10-2004-x64

1

lang.dll

windows7-x64

1

lang.dll

windows10-2004-x64

1

新云软件.url

windows7-x64

1

新云软件.url

windows10-2004-x64

1

Analysis

  • max time kernel
    147s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240412-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
  • submitted
    16/04/2024, 06:33

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    exstora.chm

  • Size

    24KB

  • MD5

    3c728fb3f47981cff02d7d449b255581

  • SHA1

    dd618388a46c90c7b6694e2e48d1523c7df0e915

  • SHA256

    7f7b22635daaa417d9c811407b7cd6792d5db5201226c265e44f4fe1cbfa2d3a

  • SHA512

    437fe04ffda1e77293e3fadfd518ce7517685d9725f5ca719bcda834848290a5eca075feac3aa348bb8595bad71b86cda62805f29f0973422bf73972484af5db

  • SSDEEP

    384:ue5QZX3xSDdzzALeBWE2QyDWiEmaTEjTy77Nq9Tnvm4:uG0hSDdXAWW4pvTE6Vq9Te4

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Windows\hh.exe
    "C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\exstora.chm
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2480

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads