Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
-
submitted
20/08/2024, 17:52
General
-
Target
PO1001910.exe
-
Size
112KB
-
MD5
1f6063e9850c7add3ef8d5acc03b83c9
-
SHA1
6fa2a99b27cad774b5d0278a66f85183ba555d73
-
SHA256
1b9a71edba9009792694340883c03331b996ec6c63b3a41c6850dcb6d4f9c4fa
-
SHA512
0e9d4b91c2a262c439c55b760f63968de32b678b354d2ff78bef406c286abd8d8d127ece077f5a86dae71bd42f1209dbce2cd53fc60b17d28b7af2d711e7f487
-
SSDEEP
1536:rYWYmIItqT6C1Zuas4sa3BTW5DmDdg9je2OJBOlW:sWQYqT6CA4BxC5DmDO9je2OJBOlW
Score
10/10
Malware Config
Extracted
Family
guloader
C2
https://hzz1.at/CHOFEB_ZwIyZsvW14.bin
xor.base64
Signatures
-
Guloader,Cloudeye
A shellcode based downloader first seen in 2020.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\PO1001910.exe"C:\Users\Admin\AppData\Local\Temp\PO1001910.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
44KB
-
Filesize
1.0MB
-
Filesize
44KB