Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    62s
  • max time network
    153s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    02/08/2024, 17:51

General

  • Target

    To.The.Core/ToTheCore/ToTheCore.exe

  • Size

    638KB

  • MD5

    c6ed4713cba59a382ce512f0ed6b8805

  • SHA1

    3857392f8ca007ae3136798dfb1de8ebe7b3a6fb

  • SHA256

    95b99bc95bc58ffacf172a2404af1f74f74495f3e3765b982feb81075e2805e0

  • SHA512

    ab876bbc1c44ae0b4e56433dc3b911512739ec1d666f8f2c8c1ccf11822b0ce9fa5f115c3495d5b0d9443f54993504471faa9cf2feca9cb75ec213551bf208e9

  • SSDEEP

    1536:4C79gXAX271lcBzqEY2lkCswVxYDXosWkd09dlPaUGXk3+:tgXpJozm2lkCsuYDbM9Z73+

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\To.The.Core\ToTheCore\ToTheCore.exe
    "C:\Users\Admin\AppData\Local\Temp\To.The.Core\ToTheCore\ToTheCore.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1716
    • C:\Users\Admin\AppData\Local\Temp\To.The.Core\ToTheCore\UnityCrashHandler64.exe
      "C:\Users\Admin\AppData\Local\Temp\To.The.Core\ToTheCore\UnityCrashHandler64.exe" --attach 1716 3149824
      2⤵
        PID:1868

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1716-0-0x0000000000650000-0x0000000000660000-memory.dmp

      Filesize

      64KB

    • memory/1716-1-0x0000000000640000-0x0000000000650000-memory.dmp

      Filesize

      64KB

    • memory/1716-5-0x0000000062B30000-0x0000000062B50000-memory.dmp

      Filesize

      128KB

    • memory/1716-18-0x0000000063020000-0x0000000063030000-memory.dmp

      Filesize

      64KB

    • memory/1716-19-0x0000000000650000-0x0000000000660000-memory.dmp

      Filesize

      64KB

    • memory/1716-21-0x0000000063130000-0x0000000063140000-memory.dmp

      Filesize

      64KB

    • memory/1716-20-0x0000000000640000-0x0000000000650000-memory.dmp

      Filesize

      64KB

    • memory/1716-22-0x000007FFFFEB0000-0x000007FFFFEC0000-memory.dmp

      Filesize

      64KB

    • memory/1716-31-0x0000000063340000-0x0000000063350000-memory.dmp

      Filesize

      64KB

    • memory/1716-30-0x0000000062B30000-0x0000000062B50000-memory.dmp

      Filesize

      128KB

    • memory/1716-32-0x0000000063490000-0x00000000634A0000-memory.dmp

      Filesize

      64KB

    • memory/1716-33-0x00000000634A0000-0x00000000634B0000-memory.dmp

      Filesize

      64KB

    • memory/1716-34-0x00000000635C0000-0x00000000635D0000-memory.dmp

      Filesize

      64KB

    • memory/1716-35-0x00000000635D0000-0x00000000635E0000-memory.dmp

      Filesize

      64KB

    • memory/1716-36-0x0000000063020000-0x0000000063030000-memory.dmp

      Filesize

      64KB

    • memory/1716-42-0x00000000635E0000-0x00000000635F0000-memory.dmp

      Filesize

      64KB

    • memory/1716-41-0x0000000063130000-0x0000000063140000-memory.dmp

      Filesize

      64KB

    • memory/1716-44-0x00000000637F0000-0x0000000063800000-memory.dmp

      Filesize

      64KB

    • memory/1716-43-0x0000000063340000-0x0000000063350000-memory.dmp

      Filesize

      64KB

    • memory/1716-45-0x0000000063860000-0x0000000063880000-memory.dmp

      Filesize

      128KB

    • memory/1716-46-0x00000000639D0000-0x00000000639E0000-memory.dmp

      Filesize

      64KB

    • memory/1716-48-0x0000000063B60000-0x0000000063B70000-memory.dmp

      Filesize

      64KB

    • memory/1716-47-0x0000000063490000-0x00000000634A0000-memory.dmp

      Filesize

      64KB

    • memory/1716-50-0x0000000063C70000-0x0000000063C80000-memory.dmp

      Filesize

      64KB

    • memory/1716-49-0x00000000634A0000-0x00000000634B0000-memory.dmp

      Filesize

      64KB

    • memory/1716-81-0x000007FFFFE70000-0x000007FFFFE80000-memory.dmp

      Filesize

      64KB

    • memory/1716-83-0x000007FFFFE40000-0x000007FFFFE50000-memory.dmp

      Filesize

      64KB

    • memory/1716-85-0x00000000635C0000-0x00000000635D0000-memory.dmp

      Filesize

      64KB

    • memory/1716-86-0x00000000635D0000-0x00000000635E0000-memory.dmp

      Filesize

      64KB

    • memory/1716-87-0x00000000635E0000-0x00000000635F0000-memory.dmp

      Filesize

      64KB

    • memory/1716-88-0x00000000637F0000-0x0000000063800000-memory.dmp

      Filesize

      64KB

    • memory/1716-89-0x0000000063860000-0x0000000063880000-memory.dmp

      Filesize

      128KB

    • memory/1716-90-0x00000000639D0000-0x00000000639E0000-memory.dmp

      Filesize

      64KB

    • memory/1716-91-0x0000000063B60000-0x0000000063B70000-memory.dmp

      Filesize

      64KB

    • memory/1716-92-0x0000000063C70000-0x0000000063C80000-memory.dmp

      Filesize

      64KB