Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    25/06/2024, 13:00

General

  • Target

    023d6c731d43be13a7c97b6fc2451ae6161a9013ccf00d584ecf72604454c669.exe

  • Size

    15.4MB

  • MD5

    66c5516ad752119e679e3ffab824aefd

  • SHA1

    e99dcd8bf73120aec155b3589d4cb758e6b468c5

  • SHA256

    023d6c731d43be13a7c97b6fc2451ae6161a9013ccf00d584ecf72604454c669

  • SHA512

    80050d7c21473aa6089a448ba5e51e4676ce346c9f2ed90f7bd9f6466cb712c2f55bbfde5e6d986257476679abd1493e8fd4e7397008203c0ae14f5edc496cae

  • SSDEEP

    393216:Rt9xKsfr1seCkrPmWALzYM1EpZyJqmKZ0NvnWV2eh:7zJs8reBL9GZuqt0xnWV2y

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\023d6c731d43be13a7c97b6fc2451ae6161a9013ccf00d584ecf72604454c669.exe
    "C:\Users\Admin\AppData\Local\Temp\023d6c731d43be13a7c97b6fc2451ae6161a9013ccf00d584ecf72604454c669.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:2164

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2164-0-0x0000000000D29000-0x000000000139A000-memory.dmp

    Filesize

    6.4MB

  • memory/2164-8-0x0000000000280000-0x0000000000281000-memory.dmp

    Filesize

    4KB

  • memory/2164-40-0x0000000000360000-0x0000000000361000-memory.dmp

    Filesize

    4KB

  • memory/2164-43-0x0000000000400000-0x00000000022FE000-memory.dmp

    Filesize

    31.0MB

  • memory/2164-38-0x0000000000360000-0x0000000000361000-memory.dmp

    Filesize

    4KB

  • memory/2164-35-0x0000000000350000-0x0000000000351000-memory.dmp

    Filesize

    4KB

  • memory/2164-33-0x0000000000350000-0x0000000000351000-memory.dmp

    Filesize

    4KB

  • memory/2164-30-0x0000000000340000-0x0000000000341000-memory.dmp

    Filesize

    4KB

  • memory/2164-28-0x0000000000340000-0x0000000000341000-memory.dmp

    Filesize

    4KB

  • memory/2164-25-0x00000000002B0000-0x00000000002B1000-memory.dmp

    Filesize

    4KB

  • memory/2164-23-0x00000000002B0000-0x00000000002B1000-memory.dmp

    Filesize

    4KB

  • memory/2164-20-0x00000000002A0000-0x00000000002A1000-memory.dmp

    Filesize

    4KB

  • memory/2164-18-0x00000000002A0000-0x00000000002A1000-memory.dmp

    Filesize

    4KB

  • memory/2164-16-0x00000000002A0000-0x00000000002A1000-memory.dmp

    Filesize

    4KB

  • memory/2164-15-0x0000000000290000-0x0000000000291000-memory.dmp

    Filesize

    4KB

  • memory/2164-13-0x0000000000290000-0x0000000000291000-memory.dmp

    Filesize

    4KB

  • memory/2164-11-0x0000000000290000-0x0000000000291000-memory.dmp

    Filesize

    4KB

  • memory/2164-10-0x0000000000280000-0x0000000000281000-memory.dmp

    Filesize

    4KB

  • memory/2164-6-0x0000000000280000-0x0000000000281000-memory.dmp

    Filesize

    4KB

  • memory/2164-5-0x0000000000270000-0x0000000000271000-memory.dmp

    Filesize

    4KB

  • memory/2164-3-0x0000000000270000-0x0000000000271000-memory.dmp

    Filesize

    4KB

  • memory/2164-1-0x0000000000270000-0x0000000000271000-memory.dmp

    Filesize

    4KB

  • memory/2164-44-0x0000000000400000-0x00000000022FE000-memory.dmp

    Filesize

    31.0MB

  • memory/2164-45-0x0000000000400000-0x00000000022FE000-memory.dmp

    Filesize

    31.0MB

  • memory/2164-46-0x0000000000D29000-0x000000000139A000-memory.dmp

    Filesize

    6.4MB

  • memory/2164-47-0x0000000000400000-0x00000000022FE000-memory.dmp

    Filesize

    31.0MB

  • memory/2164-48-0x0000000000400000-0x00000000022FE000-memory.dmp

    Filesize

    31.0MB

  • memory/2164-49-0x0000000000400000-0x00000000022FE000-memory.dmp

    Filesize

    31.0MB