Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    143s
  • max time network
    129s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240611-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25/06/2024, 21:02

General

  • Target

    c881bb5a8a238cae4fe55d59214517705aaf136abed50eb78e2210e31e975944.exe

  • Size

    10.8MB

  • MD5

    1ba83bd488d4e82f9965c351576d69ed

  • SHA1

    ca99219df3aa99080df5153c3e67180e02a8b3ed

  • SHA256

    c881bb5a8a238cae4fe55d59214517705aaf136abed50eb78e2210e31e975944

  • SHA512

    66731288b9aea43ae509f6382cbcf94d32619cc98b3162e8057a17a0b3bb9ca9df1af62b2f746199a87c42d412833f2118bcc5cbf7ee8c5a51820280e366a6ec

  • SSDEEP

    196608:OqdFgW+tBGo3vY6j/2vQgQctSpiN9s5TZHdxMkL44r+zidLWo6lQ9rWA:tPIhY6jLgQctS+4nGkL44K2LWo6l

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c881bb5a8a238cae4fe55d59214517705aaf136abed50eb78e2210e31e975944.exe
    "C:\Users\Admin\AppData\Local\Temp\c881bb5a8a238cae4fe55d59214517705aaf136abed50eb78e2210e31e975944.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:3236

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3236-0-0x00000000004B5000-0x0000000000ACC000-memory.dmp

    Filesize

    6.1MB

  • memory/3236-3-0x00000000016B0000-0x00000000016B1000-memory.dmp

    Filesize

    4KB

  • memory/3236-2-0x00000000016A0000-0x00000000016A1000-memory.dmp

    Filesize

    4KB

  • memory/3236-1-0x0000000001680000-0x0000000001681000-memory.dmp

    Filesize

    4KB

  • memory/3236-7-0x0000000003480000-0x0000000003481000-memory.dmp

    Filesize

    4KB

  • memory/3236-8-0x0000000003490000-0x0000000003491000-memory.dmp

    Filesize

    4KB

  • memory/3236-6-0x0000000003470000-0x0000000003471000-memory.dmp

    Filesize

    4KB

  • memory/3236-5-0x0000000003460000-0x0000000003461000-memory.dmp

    Filesize

    4KB

  • memory/3236-4-0x0000000003450000-0x0000000003451000-memory.dmp

    Filesize

    4KB

  • memory/3236-9-0x0000000000400000-0x0000000001592000-memory.dmp

    Filesize

    17.6MB

  • memory/3236-10-0x0000000000400000-0x0000000001592000-memory.dmp

    Filesize

    17.6MB

  • memory/3236-14-0x00000000004B5000-0x0000000000ACC000-memory.dmp

    Filesize

    6.1MB

  • memory/3236-15-0x0000000000400000-0x0000000001592000-memory.dmp

    Filesize

    17.6MB