Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

0f562ef020...18.exe

windows7-x64

7

0f562ef020...18.exe

windows10-2004-x64

7

$APPDATA/�...÷.lnk

windows7-x64

3

$APPDATA/�...÷.lnk

windows10-2004-x64

7

$FAVORITES...÷.url

windows7-x64

6

$FAVORITES...÷.url

windows10-2004-x64

3

$FAVORITES...÷.url

windows7-x64

6

$FAVORITES...÷.url

windows10-2004-x64

3

$FAVORITES...Ø.url

windows7-x64

6

$FAVORITES...Ø.url

windows10-2004-x64

3

$FAVORITES...½.url

windows7-x64

6

$FAVORITES...½.url

windows10-2004-x64

3

$TEMP/A±�...HJ.dll

windows7-x64

1

$TEMP/A±�...HJ.dll

windows10-2004-x64

1

$TEMP/A±�...Io.dll

windows7-x64

1

$TEMP/A±�...Io.dll

windows10-2004-x64

1

$TEMP/A±�...Io.sys

windows7-x64

1

$TEMP/A±�...Io.sys

windows10-2004-x64

1

$TEMP/A±�...er.exe

windows7-x64

1

$TEMP/A±�...er.exe

windows10-2004-x64

1

$TEMP/A±�...ll.exe

windows7-x64

7

$TEMP/A±�...ll.exe

windows10-2004-x64

7

C:/Documen...��.lnk

windows7-x64

1

C:/Documen...��.lnk

windows10-2004-x64

1

C:/Documen...÷.url

windows7-x64

1

C:/Documen...÷.url

windows10-2004-x64

1

C:/Documen...÷.url

windows7-x64

1

C:/Documen...÷.url

windows10-2004-x64

1

C:/Documen...Ø.url

windows7-x64

1

C:/Documen...Ø.url

windows10-2004-x64

1

C:/Documen...½.url

windows7-x64

1

C:/Documen...½.url

windows10-2004-x64

1

Analysis

  • max time kernel
    149s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240611-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25/06/2024, 19:57

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    $TEMP/A±äËÙÆ÷/JSHJ.dll

  • Size

    52KB

  • MD5

    543df5cc612f10d753b823a893c5b636

  • SHA1

    60d8df3b1cd3d1cd8316a8ec3c4fb1a98ec13139

  • SHA256

    35fa8c59e3480e5b26e7334ec91e8318130f68583fc2e3ae04f824357271ea63

  • SHA512

    cb9b22c493f8e9a3188b35570a3bb091508fc2e41e4852eeaf17f0e9eeddeb0e68c717a9f3eaacd2c935aba9c6366e5f2d9258b38cacf9a5a5a5e02abf8d494d

  • SSDEEP

    1536:Y9hgRc5pORLL/2sLio5QNi5MR9sG0GkH9:YEIpOR/kNQMXcH9

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\$TEMP\A±äËÙÆ÷\JSHJ.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1528
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\$TEMP\A±äËÙÆ÷\JSHJ.dll,#1
      2⤵
      • Suspicious use of SetWindowsHookEx
      PID:2192

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads