Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

0f562ef020...18.exe

windows7-x64

7

0f562ef020...18.exe

windows10-2004-x64

7

$APPDATA/�...÷.lnk

windows7-x64

3

$APPDATA/�...÷.lnk

windows10-2004-x64

7

$FAVORITES...÷.url

windows7-x64

6

$FAVORITES...÷.url

windows10-2004-x64

3

$FAVORITES...÷.url

windows7-x64

6

$FAVORITES...÷.url

windows10-2004-x64

3

$FAVORITES...Ø.url

windows7-x64

6

$FAVORITES...Ø.url

windows10-2004-x64

3

$FAVORITES...½.url

windows7-x64

6

$FAVORITES...½.url

windows10-2004-x64

3

$TEMP/A±�...HJ.dll

windows7-x64

1

$TEMP/A±�...HJ.dll

windows10-2004-x64

1

$TEMP/A±�...Io.dll

windows7-x64

1

$TEMP/A±�...Io.dll

windows10-2004-x64

1

$TEMP/A±�...Io.sys

windows7-x64

1

$TEMP/A±�...Io.sys

windows10-2004-x64

1

$TEMP/A±�...er.exe

windows7-x64

1

$TEMP/A±�...er.exe

windows10-2004-x64

1

$TEMP/A±�...ll.exe

windows7-x64

7

$TEMP/A±�...ll.exe

windows10-2004-x64

7

C:/Documen...��.lnk

windows7-x64

1

C:/Documen...��.lnk

windows10-2004-x64

1

C:/Documen...÷.url

windows7-x64

1

C:/Documen...÷.url

windows10-2004-x64

1

C:/Documen...÷.url

windows7-x64

1

C:/Documen...÷.url

windows10-2004-x64

1

C:/Documen...Ø.url

windows7-x64

1

C:/Documen...Ø.url

windows10-2004-x64

1

C:/Documen...½.url

windows7-x64

1

C:/Documen...½.url

windows10-2004-x64

1

Analysis

  • max time kernel
    140s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    25/06/2024, 19:57 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    $TEMP/A±äËÙÆ÷/aspeeder.exe

  • Size

    1.0MB

  • MD5

    0b99f927d85b0d20e548183a860afaa0

  • SHA1

    5fff765df471ef83b370c92a12f56789dda2cb1f

  • SHA256

    c6eb445c422dda11d1094d927cc0f45446a7e954e72be6e3bfce81ef24f23c0f

  • SHA512

    f3290b60c149a70bf54786a2b447dbd0e94f9a16c901047a7109d4562410104dc54d6a9f7ef9a1ccc2bdd80e5b5094b8a098bb304cc2a068015e9472fb15b91c

  • SSDEEP

    12288:Con26ttYdG3mNPkab3sSp4tsNCgbzoyu7ZK6vslEpzmQmCPqSbBOWRt7uA:JLYVcIp4ts88xu7/GEIGNOWR

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: LoadsDriver 32 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of FindShellTrayWindow 5 IoCs
  • Suspicious use of SendNotifyMessage 5 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\$TEMP\A±äËÙÆ÷\aspeeder.exe
    "C:\Users\Admin\AppData\Local\Temp\$TEMP\A±äËÙÆ÷\aspeeder.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:108

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/108-0-0x0000000000400000-0x0000000000505000-memory.dmp

    Filesize

    1.0MB

    Download

  • memory/108-1-0x0000000000220000-0x0000000000221000-memory.dmp

    Filesize

    4KB

    Download

  • memory/108-2-0x0000000000820000-0x0000000000833000-memory.dmp

    Filesize

    76KB

    Download

  • memory/108-3-0x0000000000400000-0x0000000000505000-memory.dmp

    Filesize

    1.0MB

    Download

  • memory/108-5-0x0000000000220000-0x0000000000221000-memory.dmp

    Filesize

    4KB

    Download

  • memory/108-4-0x0000000000820000-0x0000000000833000-memory.dmp

    Filesize

    76KB

    Download

  • memory/108-7-0x0000000000820000-0x0000000000833000-memory.dmp

    Filesize

    76KB

    Download

  • memory/108-14-0x0000000000820000-0x0000000000833000-memory.dmp

    Filesize

    76KB

    Download

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.