Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    145s
  • max time network
    151s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    10/07/2024, 02:23

General

  • Target

    CCheckerv1.1_270322115345/CCheckerv1.1/CCheckerv1.1.exe

  • Size

    359.3MB

  • MD5

    9749f2304724744c2aa9c5aa2c6d72c2

  • SHA1

    09b4fdf8df328a427411b418c3f9d6ff99bfab83

  • SHA256

    6ac4e317c52d4c25001034ec182e952653ce0bd32adf38d7e35d603a892d808c

  • SHA512

    65cd8a797e376c07f880dae53b4e0a18cd71e4b310608a93e925b7dae0480eb6ce1b85f68e3d4e8c5b58c1ba165362b7587135ed9feabc080b7d1f7148ed1fae

  • SSDEEP

    98304:KoRPh5rvXWAtX8XuKIzaPPG1XQfgKsp0Z345qh//Z/YbutPSs:pFvXWaXPd8G1Afgv+Z3B/0up

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\CCheckerv1.1_270322115345\CCheckerv1.1\CCheckerv1.1.exe
    "C:\Users\Admin\AppData\Local\Temp\CCheckerv1.1_270322115345\CCheckerv1.1\CCheckerv1.1.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:2108
  • C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    1⤵
      PID:2188

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2108-0-0x0000000075610000-0x000000007565A000-memory.dmp

      Filesize

      296KB

    • memory/2108-2-0x0000000001F20000-0x0000000001F66000-memory.dmp

      Filesize

      280KB

    • memory/2108-1-0x0000000000010000-0x000000000038D000-memory.dmp

      Filesize

      3.5MB

    • memory/2108-4-0x0000000001F20000-0x0000000001F66000-memory.dmp

      Filesize

      280KB

    • memory/2108-6-0x0000000000010000-0x000000000038D000-memory.dmp

      Filesize

      3.5MB

    • memory/2108-3-0x0000000000010000-0x000000000038D000-memory.dmp

      Filesize

      3.5MB

    • memory/2108-8-0x0000000000010000-0x000000000038D000-memory.dmp

      Filesize

      3.5MB

    • memory/2108-11-0x0000000000010000-0x000000000038D000-memory.dmp

      Filesize

      3.5MB

    • memory/2108-7-0x0000000000520000-0x0000000000521000-memory.dmp

      Filesize

      4KB

    • memory/2108-5-0x0000000000012000-0x0000000000050000-memory.dmp

      Filesize

      248KB

    • memory/2108-12-0x0000000077A00000-0x0000000077A47000-memory.dmp

      Filesize

      284KB

    • memory/2108-15-0x0000000000010000-0x000000000038D000-memory.dmp

      Filesize

      3.5MB

    • memory/2108-14-0x0000000075710000-0x0000000075719000-memory.dmp

      Filesize

      36KB

    • memory/2108-13-0x0000000075900000-0x0000000075957000-memory.dmp

      Filesize

      348KB

    • memory/2108-10-0x0000000075A80000-0x0000000075B2C000-memory.dmp

      Filesize

      688KB

    • memory/2108-16-0x0000000000010000-0x000000000038D000-memory.dmp

      Filesize

      3.5MB

    • memory/2108-18-0x0000000075B50000-0x0000000075CAC000-memory.dmp

      Filesize

      1.4MB

    • memory/2108-19-0x0000000000010000-0x000000000038D000-memory.dmp

      Filesize

      3.5MB

    • memory/2108-20-0x0000000075CC0000-0x0000000075D4F000-memory.dmp

      Filesize

      572KB

    • memory/2108-21-0x0000000074C10000-0x0000000074C90000-memory.dmp

      Filesize

      512KB

    • memory/2108-22-0x0000000000010000-0x000000000038D000-memory.dmp

      Filesize

      3.5MB

    • memory/2108-23-0x0000000000010000-0x000000000038D000-memory.dmp

      Filesize

      3.5MB

    • memory/2108-24-0x0000000075D50000-0x000000007699A000-memory.dmp

      Filesize

      12.3MB

    • memory/2108-25-0x0000000074590000-0x00000000745A7000-memory.dmp

      Filesize

      92KB

    • memory/2108-26-0x0000000077420000-0x0000000077455000-memory.dmp

      Filesize

      212KB

    • memory/2108-27-0x0000000000010000-0x000000000038D000-memory.dmp

      Filesize

      3.5MB

    • memory/2108-28-0x0000000000010000-0x000000000038D000-memory.dmp

      Filesize

      3.5MB

    • memory/2108-35-0x0000000075900000-0x0000000075957000-memory.dmp

      Filesize

      348KB

    • memory/2108-29-0x0000000077A00000-0x0000000077A47000-memory.dmp

      Filesize

      284KB

    • memory/2108-37-0x0000000075480000-0x00000000754FD000-memory.dmp

      Filesize

      500KB

    • memory/2108-36-0x0000000075B50000-0x0000000075CAC000-memory.dmp

      Filesize

      1.4MB

    • memory/2108-33-0x0000000075610000-0x000000007565A000-memory.dmp

      Filesize

      296KB

    • memory/2108-31-0x0000000075A80000-0x0000000075B2C000-memory.dmp

      Filesize

      688KB

    • memory/2108-42-0x0000000074C10000-0x0000000074C90000-memory.dmp

      Filesize

      512KB

    • memory/2108-45-0x0000000075B30000-0x0000000075B35000-memory.dmp

      Filesize

      20KB

    • memory/2108-44-0x0000000074BF0000-0x0000000074C03000-memory.dmp

      Filesize

      76KB

    • memory/2108-41-0x0000000075700000-0x0000000075703000-memory.dmp

      Filesize

      12KB

    • memory/2108-40-0x0000000074C90000-0x0000000074D85000-memory.dmp

      Filesize

      980KB

    • memory/2108-46-0x0000000074650000-0x0000000074785000-memory.dmp

      Filesize

      1.2MB

    • memory/2108-47-0x000000006FD00000-0x000000006FE49000-memory.dmp

      Filesize

      1.3MB

    • memory/2108-48-0x00000000745D0000-0x0000000074648000-memory.dmp

      Filesize

      480KB

    • memory/2108-39-0x0000000074D90000-0x000000007547E000-memory.dmp

      Filesize

      6.9MB

    • memory/2108-51-0x0000000077420000-0x0000000077455000-memory.dmp

      Filesize

      212KB

    • memory/2108-52-0x00000000769A0000-0x00000000769A6000-memory.dmp

      Filesize

      24KB

    • memory/2108-49-0x000000006FC30000-0x000000006FCFA000-memory.dmp

      Filesize

      808KB

    • memory/2108-54-0x0000000001F20000-0x0000000001F66000-memory.dmp

      Filesize

      280KB

    • memory/2108-53-0x000000006D970000-0x000000006DA58000-memory.dmp

      Filesize

      928KB

    • memory/2108-55-0x0000000000012000-0x0000000000050000-memory.dmp

      Filesize

      248KB

    • memory/2108-56-0x0000000000010000-0x000000000038D000-memory.dmp

      Filesize

      3.5MB

    • memory/2108-57-0x0000000000010000-0x000000000038D000-memory.dmp

      Filesize

      3.5MB

    • memory/2108-58-0x0000000000010000-0x000000000038D000-memory.dmp

      Filesize

      3.5MB

    • memory/2108-70-0x0000000074D90000-0x000000007547E000-memory.dmp

      Filesize

      6.9MB

    • memory/2108-86-0x0000000077A00000-0x0000000077A47000-memory.dmp

      Filesize

      284KB