Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
21/07/2024, 07:31
General
-
Target
88e8bf064a7aa6400fb1ddb5d21488f0N.exe
-
Size
2.9MB
-
MD5
88e8bf064a7aa6400fb1ddb5d21488f0
-
SHA1
ac974fa20ebf8531ec05ec1ceae7271bc131b5ca
-
SHA256
e04209b06537e446914b6c27d5343f671bafcca8ad324d94a5d0fce346926c2e
-
SHA512
6a5e7e9948693d672b79a1885c90264cf9cdc0108f6d4bc1145b029926e6564b120fc3094c83b5575930cf821ce01a68903dc3e5c5e0d2501154eb0b1455a395
-
SSDEEP
49152:v7Srk6eF6g2yiu7t2Lj3p3VMI0wPQ+iPY7V1RcJSEpFApHuBT3w1n70xcb:v7/6ZgRRe70QQ+F7V1RqepHOTw170ib
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 3 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of SetWindowsHookEx 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\88e8bf064a7aa6400fb1ddb5d21488f0N.exe"C:\Users\Admin\AppData\Local\Temp\88e8bf064a7aa6400fb1ddb5d21488f0N.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: RenamesItself
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.9MB
MD53736bd8b3f83a3865c279f1b31c4736e
SHA1ceb8c7475ad88294bd6033e2fef8890253835dc9
SHA256d1fe6fe4fdd4d98e6e6e6e7bf0547adf4944e94d1fd0ca7aba37356b5212ed10
SHA512227bdebc50c998fa9403381a24d52927c05b7687464436d4ca8c2d3a6c3733ba1476b109ba99d3a27216ef2add484377d1f0a81a846bb3cb8534f29720146bbe
-
Filesize
10.9MB
-
Filesize
10.9MB
-
Filesize
10.9MB
-
Filesize
10.9MB
-
Filesize
10.9MB
-
Filesize
10.9MB