Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    01/07/2024, 09:22

General

  • Target

    7ff95b35f10c5050d92dac20243646411be4f6c70796edda11220f58b365bcb8.exe

  • Size

    10.4MB

  • MD5

    280af05c4e9f9c759e265bb850b841d3

  • SHA1

    e9c9f4c2b52e801d520efecbb79b6daf041092ba

  • SHA256

    7ff95b35f10c5050d92dac20243646411be4f6c70796edda11220f58b365bcb8

  • SHA512

    aceb60e8669f52c9be0af220b49a52b4e3b8246fbde3774e57ba5b931c4e776002508686f474a65d97bb4dd1644ff49286d5655faff2eebe6d39db6532a10cbd

  • SSDEEP

    196608:aIWAE8zYqsBmiFm4CTqfG+vTiwnDmNQkJM8uDIYnKO7pl5:WAE8zD4F3e+biSDcQwM8uDuE1

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of FindShellTrayWindow 4 IoCs
  • Suspicious use of SendNotifyMessage 4 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\7ff95b35f10c5050d92dac20243646411be4f6c70796edda11220f58b365bcb8.exe
    "C:\Users\Admin\AppData\Local\Temp\7ff95b35f10c5050d92dac20243646411be4f6c70796edda11220f58b365bcb8.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:1680

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Roaming\datatemp\libcurl.dll

    Filesize

    2.5MB

    MD5

    298f5812023bab65ee23d13ee9489a6e

    SHA1

    71e9d7f205e5e7af6907c539c77a3aeea971692f

    SHA256

    fe100d35b034c15ae3b74379f4eedd321c8e4b84fe666b54ee924ca2a8bdca6e

    SHA512

    217258fb7728f61199f913fb98c894077c12a124e1596d1c6c7cfc065d4d2a6e1e03ad950c3321e2a8dcd997fb5c9524f98530db4bcb39f9914ecb5ff0e22dbd