Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    141s
  • max time network
    102s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240611-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28/06/2024, 05:35

General

  • Target

    a4322d23da9ccd8f17c92c7494f78f9ca95147cc2a99022491a98379442738cb.exe

  • Size

    5.0MB

  • MD5

    02cad00173a74991364525a9de9680d9

  • SHA1

    c83e19383f495216f0ce45a07c9f92250a87a76c

  • SHA256

    a4322d23da9ccd8f17c92c7494f78f9ca95147cc2a99022491a98379442738cb

  • SHA512

    d2c0eac4ba7f4fd4a16993aed3b4da98d87276184863e13cfb3087f1ce81198e9ced52e0fc6fdc46b5fe25448307e70634270a81c373893c2e32f7292a19c62f

  • SSDEEP

    98304:tuJLiKze37lp8x5dslLfkJwT4EJFO6+eXX/gk6JUGCz7an2Z21sahGG0Y68DPaC4:tuMLlp8aeAXde8an2qQYhSDxk+p

Score
7/10
upx

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • UPX packed file 15 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\a4322d23da9ccd8f17c92c7494f78f9ca95147cc2a99022491a98379442738cb.exe
    "C:\Users\Admin\AppData\Local\Temp\a4322d23da9ccd8f17c92c7494f78f9ca95147cc2a99022491a98379442738cb.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of SetWindowsHookEx
    PID:3440

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\E2EECore.2.7.2.dll

    Filesize

    8.4MB

    MD5

    8b6c94bbdbfb213e94a5dcb4fac28ce3

    SHA1

    b56102ca4f03556f387f8b30e2b404efabe0cb65

    SHA256

    982a177924762f270b36fe34c7d6847392b48ae53151dc2011078dceef487a53

    SHA512

    9d6d63b5d8cf7a978d7e91126d7a343c2f7acd00022da9d692f63e50835fdd84a59a93328564f10622f2b1f6adfd7febdd98b8ddb294d0754ed45cc9c165d25a

  • memory/3440-12-0x0000000000400000-0x0000000000B83000-memory.dmp

    Filesize

    7.5MB

  • memory/3440-15-0x0000000000400000-0x0000000000B83000-memory.dmp

    Filesize

    7.5MB

  • memory/3440-7-0x0000000000400000-0x0000000000B83000-memory.dmp

    Filesize

    7.5MB

  • memory/3440-8-0x0000000000400000-0x0000000000B83000-memory.dmp

    Filesize

    7.5MB

  • memory/3440-9-0x0000000000400000-0x0000000000B83000-memory.dmp

    Filesize

    7.5MB

  • memory/3440-10-0x0000000000400000-0x0000000000B83000-memory.dmp

    Filesize

    7.5MB

  • memory/3440-6-0x0000000000400000-0x0000000000B83000-memory.dmp

    Filesize

    7.5MB

  • memory/3440-13-0x0000000000400000-0x0000000000B83000-memory.dmp

    Filesize

    7.5MB

  • memory/3440-11-0x0000000000400000-0x0000000000B83000-memory.dmp

    Filesize

    7.5MB

  • memory/3440-14-0x0000000000400000-0x0000000000B83000-memory.dmp

    Filesize

    7.5MB

  • memory/3440-0-0x0000000000400000-0x0000000000B83000-memory.dmp

    Filesize

    7.5MB

  • memory/3440-16-0x0000000000400000-0x0000000000B83000-memory.dmp

    Filesize

    7.5MB

  • memory/3440-17-0x0000000000400000-0x0000000000B83000-memory.dmp

    Filesize

    7.5MB

  • memory/3440-18-0x0000000000400000-0x0000000000B83000-memory.dmp

    Filesize

    7.5MB

  • memory/3440-19-0x0000000000400000-0x0000000000B83000-memory.dmp

    Filesize

    7.5MB