Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    24/05/2024, 06:48

General

  • Target

    3e7c292a899033e4ed9e2eb3244b24be58b59812b3e0a80293166e25a63fad83.exe

  • Size

    11.1MB

  • MD5

    d05353148335862b00347e18df9640bf

  • SHA1

    2ba6b71fd182c309a1c71567b4b416c7430826bf

  • SHA256

    3e7c292a899033e4ed9e2eb3244b24be58b59812b3e0a80293166e25a63fad83

  • SHA512

    d29df3225ad809498bc7454a73e4c9f02f98fe6e1b10613308a44db275fe2943952916e0dcd5a40dcd65059504df99c05df13ad5bf759302f830d3461550d811

  • SSDEEP

    196608:6bW7roS86L3/ey2xKaOYlQ3FFX4S2tYuzSfTiJsOO2vfuXJX6mBASPOzPvV/X7iP:6beJvq+112tYu+TLOOzxBASaRXnJr

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Suspicious use of NtSetInformationThreadHideFromDebugger 4 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3e7c292a899033e4ed9e2eb3244b24be58b59812b3e0a80293166e25a63fad83.exe
    "C:\Users\Admin\AppData\Local\Temp\3e7c292a899033e4ed9e2eb3244b24be58b59812b3e0a80293166e25a63fad83.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • Suspicious use of SetWindowsHookEx
    PID:3068

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\E2EECore.2.7.2.dll

    Filesize

    8.4MB

    MD5

    8b6c94bbdbfb213e94a5dcb4fac28ce3

    SHA1

    b56102ca4f03556f387f8b30e2b404efabe0cb65

    SHA256

    982a177924762f270b36fe34c7d6847392b48ae53151dc2011078dceef487a53

    SHA512

    9d6d63b5d8cf7a978d7e91126d7a343c2f7acd00022da9d692f63e50835fdd84a59a93328564f10622f2b1f6adfd7febdd98b8ddb294d0754ed45cc9c165d25a

  • memory/3068-0-0x0000000000400000-0x0000000001863000-memory.dmp

    Filesize

    20.4MB

  • memory/3068-1-0x000000007EBD0000-0x000000007EFA1000-memory.dmp

    Filesize

    3.8MB

  • memory/3068-2-0x0000000077BF0000-0x0000000077BF1000-memory.dmp

    Filesize

    4KB

  • memory/3068-7-0x0000000000400000-0x0000000001863000-memory.dmp

    Filesize

    20.4MB

  • memory/3068-8-0x0000000000400000-0x0000000001863000-memory.dmp

    Filesize

    20.4MB

  • memory/3068-10-0x000000007EBD0000-0x000000007EFA1000-memory.dmp

    Filesize

    3.8MB

  • memory/3068-9-0x0000000000400000-0x0000000001863000-memory.dmp

    Filesize

    20.4MB

  • memory/3068-11-0x0000000000400000-0x0000000001863000-memory.dmp

    Filesize

    20.4MB