Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    36s
  • max time network
    16s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    09/05/2024, 18:16

General

  • Target

    FL64 (scaled).exe

  • Size

    2.9MB

  • MD5

    4757429c07db24a1a4ab4e8396951e11

  • SHA1

    11f0b7c80f494b194ee319ee2833a81712ec8890

  • SHA256

    840cac6b0a18d520877554f0e59a2bf7c3681e673829882718eb99e19d1611fd

  • SHA512

    b5ff641b00b9d693565d603c1e32177aa15b9c185cf0b3b30323e4431cebec69b0246ab5f6a0ba3b8de91d3a3b0072dbf9930ad2826c9f4611e84b24e35f607f

  • SSDEEP

    49152:kbQUGviYVTh4zNyUlfNGcmmAj73+W91r2frAMSFI8WjhGTh7vrhsOV:tUEiYD4gURRUjaq+GhsOV

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\FL64 (scaled).exe
    "C:\Users\Admin\AppData\Local\Temp\FL64 (scaled).exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • Suspicious behavior: EnumeratesProcesses
    PID:2084

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2084-4-0x0000000077270000-0x0000000077272000-memory.dmp

    Filesize

    8KB

  • memory/2084-2-0x0000000077270000-0x0000000077272000-memory.dmp

    Filesize

    8KB

  • memory/2084-0-0x0000000077270000-0x0000000077272000-memory.dmp

    Filesize

    8KB

  • memory/2084-5-0x000000006F6D0000-0x0000000073757000-memory.dmp

    Filesize

    64.5MB

  • memory/2084-6-0x00000000732D7000-0x000000007336A000-memory.dmp

    Filesize

    588KB

  • memory/2084-7-0x000000006F6D0000-0x0000000073757000-memory.dmp

    Filesize

    64.5MB