Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    30/05/2024, 23:30 UTC

General

  • Target

    66524e81549e2c3ffbce548c3b56030232961f4d787076de7e94d071015262c3.exe

  • Size

    6.9MB

  • MD5

    351f79ef800ec024f5daf4e17dd3119a

  • SHA1

    e1fa9ff6b4797e9ab34dd601d4dddd93d957919d

  • SHA256

    66524e81549e2c3ffbce548c3b56030232961f4d787076de7e94d071015262c3

  • SHA512

    3f8c5517d4b6f9fe4ed4b037093b120ec5cb3786e66398da824467827c5b76d32806329184501c9fc99e362aea4c6cbd09bdb7aafe4ccecf54879b271f5d10ca

  • SSDEEP

    196608:mfpZq3Dss80cgnRCLqp4hlmYPpiAj5XD2U/mB:GgDssbBnoq4qLA5D22

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 3 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\66524e81549e2c3ffbce548c3b56030232961f4d787076de7e94d071015262c3.exe
    "C:\Users\Admin\AppData\Local\Temp\66524e81549e2c3ffbce548c3b56030232961f4d787076de7e94d071015262c3.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:2368

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2368-0-0x00000000001D0000-0x00000000001D1000-memory.dmp

    Filesize

    4KB

  • memory/2368-2-0x00000000001D0000-0x00000000001D1000-memory.dmp

    Filesize

    4KB

  • memory/2368-29-0x00000000002A0000-0x00000000002A1000-memory.dmp

    Filesize

    4KB

  • memory/2368-36-0x0000000000766000-0x0000000000BC8000-memory.dmp

    Filesize

    4.4MB

  • memory/2368-34-0x00000000003B0000-0x00000000003B1000-memory.dmp

    Filesize

    4KB

  • memory/2368-40-0x0000000000400000-0x00000000012A3000-memory.dmp

    Filesize

    14.6MB

  • memory/2368-39-0x0000000000400000-0x00000000012A3000-memory.dmp

    Filesize

    14.6MB

  • memory/2368-32-0x00000000003B0000-0x00000000003B1000-memory.dmp

    Filesize

    4KB

  • memory/2368-30-0x00000000003B0000-0x00000000003B1000-memory.dmp

    Filesize

    4KB

  • memory/2368-27-0x00000000002A0000-0x00000000002A1000-memory.dmp

    Filesize

    4KB

  • memory/2368-24-0x0000000000290000-0x0000000000291000-memory.dmp

    Filesize

    4KB

  • memory/2368-22-0x0000000000290000-0x0000000000291000-memory.dmp

    Filesize

    4KB

  • memory/2368-19-0x0000000000280000-0x0000000000281000-memory.dmp

    Filesize

    4KB

  • memory/2368-17-0x0000000000280000-0x0000000000281000-memory.dmp

    Filesize

    4KB

  • memory/2368-42-0x0000000001390000-0x000000000139A000-memory.dmp

    Filesize

    40KB

  • memory/2368-41-0x0000000001390000-0x000000000139A000-memory.dmp

    Filesize

    40KB

  • memory/2368-14-0x0000000000270000-0x0000000000271000-memory.dmp

    Filesize

    4KB

  • memory/2368-12-0x0000000000270000-0x0000000000271000-memory.dmp

    Filesize

    4KB

  • memory/2368-9-0x00000000001E0000-0x00000000001E1000-memory.dmp

    Filesize

    4KB

  • memory/2368-7-0x00000000001E0000-0x00000000001E1000-memory.dmp

    Filesize

    4KB

  • memory/2368-5-0x00000000001E0000-0x00000000001E1000-memory.dmp

    Filesize

    4KB

  • memory/2368-4-0x00000000001D0000-0x00000000001D1000-memory.dmp

    Filesize

    4KB

  • memory/2368-45-0x0000000003060000-0x000000000306A000-memory.dmp

    Filesize

    40KB

  • memory/2368-44-0x0000000003060000-0x000000000306A000-memory.dmp

    Filesize

    40KB

  • memory/2368-43-0x0000000003060000-0x000000000306A000-memory.dmp

    Filesize

    40KB

  • memory/2368-47-0x0000000000400000-0x00000000012A3000-memory.dmp

    Filesize

    14.6MB

  • memory/2368-48-0x0000000000766000-0x0000000000BC8000-memory.dmp

    Filesize

    4.4MB

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.