Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    130s
  • max time network
    148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03/06/2024, 18:06

General

  • Target

    WeMod-Setup.exe

  • Size

    141KB

  • MD5

    795a3999162f058392866e25ff2cadb1

  • SHA1

    3efb3e2372798b59377029bbb572681e83566406

  • SHA256

    f21e7fca73ecaacfb15d2e2702ba9e33ede84ec8e4aa936c3becdebbc45c4685

  • SHA512

    86222456020520962a4d2a08ee96665fd3078cc369a819eb6c15b2769dec4886bd17ba38281610c0d653fee51fa1258630bb1a686d5f59d0f68c2e926c3cbe8c

  • SSDEEP

    3072:XGjm4ILlCI+4COHCyhaEtHZugr7t4ILlCI+4TOHHSTs:Xr+bwaEtHBHto

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\WeMod-Setup.exe
    "C:\Users\Admin\AppData\Local\Temp\WeMod-Setup.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:3848

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3848-1-0x000001FB6DCC0000-0x000001FB6DCE6000-memory.dmp

    Filesize

    152KB

  • memory/3848-0-0x00007FFCBB043000-0x00007FFCBB045000-memory.dmp

    Filesize

    8KB

  • memory/3848-2-0x00007FFCBB040000-0x00007FFCBBB01000-memory.dmp

    Filesize

    10.8MB

  • memory/3848-3-0x00007FFCBB040000-0x00007FFCBBB01000-memory.dmp

    Filesize

    10.8MB

  • memory/3848-4-0x00007FFCBB040000-0x00007FFCBBB01000-memory.dmp

    Filesize

    10.8MB

  • memory/3848-5-0x00007FFCBB040000-0x00007FFCBBB01000-memory.dmp

    Filesize

    10.8MB

  • memory/3848-13-0x000001FB70440000-0x000001FB705E9000-memory.dmp

    Filesize

    1.7MB

  • memory/3848-14-0x00007FFCBB040000-0x00007FFCBBB01000-memory.dmp

    Filesize

    10.8MB