Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    141s
  • max time network
    19s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    06/07/2024, 22:34

General

  • Target

    Web2Pic_Pro.exe

  • Size

    502KB

  • MD5

    b2ccc32feac58a3750fe8974187f4b7d

  • SHA1

    904ea756b1f840afccd6724566249615a53f2689

  • SHA256

    edd9b18ee2dd49f5ffc38f4e3e0189391d8c3bb601ea61c229c185d3aed5b4bd

  • SHA512

    4ba9ba07ba4b0df4fae99e197b7c0c821e88c2b971dccca136aec9a75f7e2921f363765e4617631774b1bd7e542b25a9fffb5c0e7709866146f19b0c98787d43

  • SSDEEP

    12288:J8V4vfaDkBx4JYlIR1qqx4sl8M2EmlQoJ4RKQaa+O:J6ex5qxTWdHGk4RKlO

Score
4/10

Malware Config

Signatures

  • Drops file in Windows directory 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Web2Pic_Pro.exe
    "C:\Users\Admin\AppData\Local\Temp\Web2Pic_Pro.exe"
    1⤵
    • Drops file in Windows directory
    • Suspicious use of SetWindowsHookEx
    PID:1312

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Windows\win.ini

    Filesize

    700B

    MD5

    a16b3c21c2136bc13323b1aa2c914975

    SHA1

    ac8698eb403e20985b96173b196b9756fe7b7d27

    SHA256

    adcfe1bece248fe6e7041dd01b4108bd608877e8761d1bffa4a6a72f5725f125

    SHA512

    23b21a54faf4a2f837fdafd99156cf528989c278e03ac7af4bc492abfbdc24f8cffe2608516a0aa8a5a02740dfa0efd5921334663b75b5e2e098e515e90526d7

  • C:\Windows\win.ini

    Filesize

    700B

    MD5

    cbed3b92ee5b7fbc9cf15820362f77b7

    SHA1

    ca7c55a06d4a795584ad242e2c9f1e9df5111bf2

    SHA256

    8365fb805d865c55bcc8c1ef732ef83d872221b8be7334f431e78de68fabd84c

    SHA512

    1a66d8dd7ad7fb3f6766cb01cf7cf877856ff8384723525634156412ecc70d1abfa94796063090df512427be0613af7db38271bf48cba36dcd7c9550fa8000b4

  • memory/1312-0-0x0000000000220000-0x0000000000221000-memory.dmp

    Filesize

    4KB

  • memory/1312-31-0x0000000000400000-0x00000000008D9000-memory.dmp

    Filesize

    4.8MB

  • memory/1312-33-0x0000000000220000-0x0000000000221000-memory.dmp

    Filesize

    4KB