Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    0s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240419-en
  • resource tags

    arch:x64arch:x86image:win11-20240419-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    30/06/2024, 10:57

General

  • Target

    daaaa.exe

  • Size

    3.0MB

  • MD5

    f9d152f8e27eac86c36e543a7b551533

  • SHA1

    a2876b2126b763eebeb8f82ef9512b637a4141f1

  • SHA256

    eb4c79c671e6d04a1bbbdf8251fd46c88635e6a455a53065cb5c5a4293fae9f4

  • SHA512

    2ce6a0b28acacfc91ed9b2f90194c6827f644c83f19412ab2d8076739845591874e49d4e3c655b1ea0dc61b0db9d2b4c2840dad93c133a1b31307acc0f820cfe

  • SSDEEP

    49152:TWk+c4OnO4KrEzH+jkn0028QmJgRw/bq70dsDDWaZLfHig+MrnRxltWpFXRfe4O1:Yjkze8X2vgbq70duDVVfHimrreXRmL

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\daaaa.exe
    "C:\Users\Admin\AppData\Local\Temp\daaaa.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    PID:4144

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4144-0-0x00007FFA7DA33000-0x00007FFA7DA35000-memory.dmp

    Filesize

    8KB

  • memory/4144-1-0x000001D309C70000-0x000001D30A252000-memory.dmp

    Filesize

    5.9MB

  • memory/4144-2-0x000001D30A680000-0x000001D30A681000-memory.dmp

    Filesize

    4KB