Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    148s
  • max time network
    156s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23/06/2024, 23:56

General

  • Target

    8948bd46908e4fe49882a2702664b37985fbb7c28c34b5fe7d05e35502bd3e13.exe

  • Size

    1.7MB

  • MD5

    4bff311f9f5e17a1f0b4f6ed50ec8afc

  • SHA1

    8e919f5a584594011ff1628156ed4da6aca36fe2

  • SHA256

    8948bd46908e4fe49882a2702664b37985fbb7c28c34b5fe7d05e35502bd3e13

  • SHA512

    28034ff0cdd536b2d6d3bf06f96b516e94dcc846e9cd3193fa161ca66e88cba40064c912df927276ef16bfcf67a91713bfd139600cfded684925edce1ed12d27

  • SSDEEP

    49152:2xpJn9nry8/30ulGylml0KiEGcapOBG/fmbXO:4Hn9rT0u0jl0KiE3Bc1

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 8 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\8948bd46908e4fe49882a2702664b37985fbb7c28c34b5fe7d05e35502bd3e13.exe
    "C:\Users\Admin\AppData\Local\Temp\8948bd46908e4fe49882a2702664b37985fbb7c28c34b5fe7d05e35502bd3e13.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4968

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4968-0-0x0000000000400000-0x0000000000917000-memory.dmp

    Filesize

    5.1MB

  • memory/4968-1-0x0000000000400000-0x0000000000917000-memory.dmp

    Filesize

    5.1MB

  • memory/4968-3-0x0000000000400000-0x0000000000917000-memory.dmp

    Filesize

    5.1MB

  • memory/4968-5-0x0000000000400000-0x0000000000917000-memory.dmp

    Filesize

    5.1MB

  • memory/4968-6-0x0000000000418000-0x0000000000419000-memory.dmp

    Filesize

    4KB

  • memory/4968-4-0x0000000000400000-0x0000000000917000-memory.dmp

    Filesize

    5.1MB

  • memory/4968-2-0x0000000000400000-0x0000000000917000-memory.dmp

    Filesize

    5.1MB

  • memory/4968-7-0x0000000000400000-0x0000000000917000-memory.dmp

    Filesize

    5.1MB

  • memory/4968-8-0x0000000000400000-0x0000000000917000-memory.dmp

    Filesize

    5.1MB