Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    140s
  • max time network
    54s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06/07/2024, 22:34

General

  • Target

    Web2Pic_Pro.exe

  • Size

    502KB

  • MD5

    b2ccc32feac58a3750fe8974187f4b7d

  • SHA1

    904ea756b1f840afccd6724566249615a53f2689

  • SHA256

    edd9b18ee2dd49f5ffc38f4e3e0189391d8c3bb601ea61c229c185d3aed5b4bd

  • SHA512

    4ba9ba07ba4b0df4fae99e197b7c0c821e88c2b971dccca136aec9a75f7e2921f363765e4617631774b1bd7e542b25a9fffb5c0e7709866146f19b0c98787d43

  • SSDEEP

    12288:J8V4vfaDkBx4JYlIR1qqx4sl8M2EmlQoJ4RKQaa+O:J6ex5qxTWdHGk4RKlO

Score
4/10

Malware Config

Signatures

  • Drops file in Windows directory 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Web2Pic_Pro.exe
    "C:\Users\Admin\AppData\Local\Temp\Web2Pic_Pro.exe"
    1⤵
    • Drops file in Windows directory
    • Suspicious use of SetWindowsHookEx
    PID:1844

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Windows\win.ini

    Filesize

    314B

    MD5

    3bc16ee0da5162d2e6060b4b34864f8d

    SHA1

    101ac946af83072c52b8c862832e9c4ae03c1cd3

    SHA256

    a3f2fa0e442eb146108eb286436b909a78e029bd68ee6d914bb5dfaf7826f34b

    SHA512

    a7f21a85083821ff6207b0e3b5d9d45a1b92ca05107ba83a0c14e8069d107e6fdf5b13a977a3a23108ed5ad880febda72d529eea767c3c668b302214a394f4d8

  • memory/1844-0-0x0000000002870000-0x0000000002871000-memory.dmp

    Filesize

    4KB

  • memory/1844-31-0x0000000000400000-0x00000000008D9000-memory.dmp

    Filesize

    4.8MB

  • memory/1844-33-0x0000000002870000-0x0000000002871000-memory.dmp

    Filesize

    4KB