Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    1790s
  • max time network
    1675s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240508-en
  • resource tags

    arch:x64arch:x86image:win11-20240508-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    30/06/2024, 18:15

General

  • Target

    CTBrowserSetup_tb24gG2Gfb.exe

  • Size

    2.7MB

  • MD5

    a0fab21c52fb92a79bc492d2eb91d1d6

  • SHA1

    03d14da347c554669916d60e24bee1b540c2822e

  • SHA256

    e10f9d22cdbc39874ce875fd8031c3db26f58daf20ee8ae6a82de9ed2dfc7863

  • SHA512

    e37d3d09eef103bfe043c74921296c0b8195a3e43a3801340a9953f44f512e81acbc2051f0305a3a3f41bb98cd4587bb65c3b3a96d702b048199d24a120b446e

  • SSDEEP

    49152:VaFSMmQsOZgebSEjpj24R76kPmDzgsnQnddt4FwR+Viv6WwJrY701QnE60:VOCJEnj26ukshQnnYVWcy0GE60

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 9 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\CTBrowserSetup_tb24gG2Gfb.exe
    "C:\Users\Admin\AppData\Local\Temp\CTBrowserSetup_tb24gG2Gfb.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2492

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2492-0-0x0000000000FE0000-0x0000000001967000-memory.dmp

    Filesize

    9.5MB

  • memory/2492-1-0x0000000000FE0000-0x0000000001967000-memory.dmp

    Filesize

    9.5MB

  • memory/2492-2-0x0000000000FE0000-0x0000000001967000-memory.dmp

    Filesize

    9.5MB

  • memory/2492-3-0x0000000000FE0000-0x0000000001967000-memory.dmp

    Filesize

    9.5MB

  • memory/2492-4-0x0000000000FE0000-0x0000000001967000-memory.dmp

    Filesize

    9.5MB

  • memory/2492-10-0x0000000000FE0000-0x0000000001967000-memory.dmp

    Filesize

    9.5MB

  • memory/2492-11-0x0000000000FE0000-0x0000000001967000-memory.dmp

    Filesize

    9.5MB

  • memory/2492-12-0x0000000000FE0000-0x0000000001967000-memory.dmp

    Filesize

    9.5MB

  • memory/2492-15-0x0000000000FE0000-0x0000000001967000-memory.dmp

    Filesize

    9.5MB