Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

3e7c292a89...83.exe

windows7-x64

7

3e7c292a89...83.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    142s
  • max time network
    158s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24/05/2024, 06:48

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    3e7c292a899033e4ed9e2eb3244b24be58b59812b3e0a80293166e25a63fad83.exe

  • Size

    11.1MB

  • MD5

    d05353148335862b00347e18df9640bf

  • SHA1

    2ba6b71fd182c309a1c71567b4b416c7430826bf

  • SHA256

    3e7c292a899033e4ed9e2eb3244b24be58b59812b3e0a80293166e25a63fad83

  • SHA512

    d29df3225ad809498bc7454a73e4c9f02f98fe6e1b10613308a44db275fe2943952916e0dcd5a40dcd65059504df99c05df13ad5bf759302f830d3461550d811

  • SSDEEP

    196608:6bW7roS86L3/ey2xKaOYlQ3FFX4S2tYuzSfTiJsOO2vfuXJX6mBASPOzPvV/X7iP:6beJvq+112tYu+TLOOzxBASaRXnJr

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Suspicious use of NtSetInformationThreadHideFromDebugger 4 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3e7c292a899033e4ed9e2eb3244b24be58b59812b3e0a80293166e25a63fad83.exe
    "C:\Users\Admin\AppData\Local\Temp\3e7c292a899033e4ed9e2eb3244b24be58b59812b3e0a80293166e25a63fad83.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • Suspicious use of SetWindowsHookEx
    PID:2876
  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1408 --field-trial-handle=2276,i,5697607538120380977,9987005253899555344,262144 --variations-seed-version /prefetch:8
    1⤵
      PID:3024

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Temp\E2EECore.2.7.2.dll
      Filesize

      8.4MB

      MD5

      8b6c94bbdbfb213e94a5dcb4fac28ce3

      SHA1

      b56102ca4f03556f387f8b30e2b404efabe0cb65

      SHA256

      982a177924762f270b36fe34c7d6847392b48ae53151dc2011078dceef487a53

      SHA512

      9d6d63b5d8cf7a978d7e91126d7a343c2f7acd00022da9d692f63e50835fdd84a59a93328564f10622f2b1f6adfd7febdd98b8ddb294d0754ed45cc9c165d25a

      Download Submit

    • memory/2876-0-0x0000000000400000-0x0000000001863000-memory.dmp

      Filesize

      20.4MB

      Download

    • memory/2876-1-0x000000007FA70000-0x000000007FE41000-memory.dmp

      Filesize

      3.8MB

      Download

    • memory/2876-2-0x0000000077AF2000-0x0000000077AF3000-memory.dmp

      Filesize

      4KB

      Download

    • memory/2876-8-0x0000000000400000-0x0000000001863000-memory.dmp

      Filesize

      20.4MB

      Download

    • memory/2876-9-0x0000000000400000-0x0000000001863000-memory.dmp

      Filesize

      20.4MB

      Download

    • memory/2876-11-0x000000007FA70000-0x000000007FE41000-memory.dmp

      Filesize

      3.8MB

      Download

    • memory/2876-10-0x0000000000400000-0x0000000001863000-memory.dmp

      Filesize

      20.4MB

      Download

    • memory/2876-12-0x0000000000400000-0x0000000001863000-memory.dmp

      Filesize

      20.4MB

      Download