Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
94s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
21/07/2024, 07:31
General
-
Target
88e8bf064a7aa6400fb1ddb5d21488f0N.exe
-
Size
2.9MB
-
MD5
88e8bf064a7aa6400fb1ddb5d21488f0
-
SHA1
ac974fa20ebf8531ec05ec1ceae7271bc131b5ca
-
SHA256
e04209b06537e446914b6c27d5343f671bafcca8ad324d94a5d0fce346926c2e
-
SHA512
6a5e7e9948693d672b79a1885c90264cf9cdc0108f6d4bc1145b029926e6564b120fc3094c83b5575930cf821ce01a68903dc3e5c5e0d2501154eb0b1455a395
-
SSDEEP
49152:v7Srk6eF6g2yiu7t2Lj3p3VMI0wPQ+iPY7V1RcJSEpFApHuBT3w1n70xcb:v7/6ZgRRe70QQ+F7V1RqepHOTw170ib
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 3 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of SetWindowsHookEx 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\88e8bf064a7aa6400fb1ddb5d21488f0N.exe"C:\Users\Admin\AppData\Local\Temp\88e8bf064a7aa6400fb1ddb5d21488f0N.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: RenamesItself
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.9MB
MD5c38d12a3e8f0c1a6cc8729bc2e2b50dd
SHA19edb62ec82295656c87e42977c06c66367fc1bd3
SHA256d81fe553f6baab5ac67ad359f34b9e951255fcfab154de5a32dc6db39c74b90c
SHA512e1506c3676b74c85d4db5fd1e1944cb655b49c2f79d612e28378362d508daddd830a56fd69c3f7094490a804110e086e6053b2e448e7335c99faa791c8fb9b04
-
Filesize
10.9MB
-
Filesize
3.8MB
-
Filesize
10.9MB
-
Filesize
10.9MB
-
Filesize
10.9MB
-
Filesize
3.8MB
-
Filesize
10.9MB