Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

6

Static

static

3

hl2.exe

windows7-x64

1

hl2.exe

windows10-2004-x64

6

Analysis

  • max time kernel
    9s
  • max time network
    15s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20/04/2024, 21:09

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    hl2.exe

  • Size

    84KB

  • MD5

    b00737498dbb7d4ab17c44aec27d50bd

  • SHA1

    be24680e7cf4ff33322e3e9805b0e9b9337f41f3

  • SHA256

    12a869eb2254f2091989ee967bebd3f1472372581fd0698924689bfcaba86c54

  • SHA512

    f4a70608101ad5e0224ac0ba25c3b3b6adaade678a7edc2825c4254ba5101238943e911945a78ee6c0258c0c3b5a392fc590a8d14a81b0a73f3da267371c6140

  • SSDEEP

    768:PtiQBDbJCuPRjqzpWE/FuOwUPs/Hpom5BxX7X5XYTdX/OPGtna4Pb0pSFfivbX:PtilIps5/Fu6Pio6X7X5XYZXP/b1u

Score
6/10

Malware Config

Signatures

  • Drops desktop.ini file(s) 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\hl2.exe
    "C:\Users\Admin\AppData\Local\Temp\hl2.exe"
    1⤵
      PID:948
    • C:\Windows\System32\GameBarPresenceWriter.exe
      "C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
      1⤵
        PID:5092
      • C:\Windows\system32\OpenWith.exe
        C:\Windows\system32\OpenWith.exe -Embedding
        1⤵
        • Suspicious use of SetWindowsHookEx
        PID:2576
      • C:\Windows\system32\svchost.exe
        C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
        1⤵
        • Drops desktop.ini file(s)
        PID:4168

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • C:\Users\Admin\Videos\Captures\desktop.ini
        Filesize

        190B

        MD5

        b0d27eaec71f1cd73b015f5ceeb15f9d

        SHA1

        62264f8b5c2f5034a1e4143df6e8c787165fbc2f

        SHA256

        86d9f822aeb989755fac82929e8db369b3f5f04117ef96fd76e3d5f920a501d2

        SHA512

        7b5c9783a0a14b600b156825639d24cbbc000f5066c48ce9fecc195255603fc55129aaaca336d7ce6ad4e941d5492b756562f2c7a1d151fcfc2dabac76f3946c

        Download Submit