Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
140s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
-
submitted
21/08/2024, 02:23
General
-
Target
$TEMP/VirtualDub.exe
-
Size
1.4MB
-
MD5
e67336d39099619b0ac36cf03e587d6c
-
SHA1
7be2c0fe57505938a4048f80eef9db1beb33e661
-
SHA256
a80205eecab6d42cbf39248298c17befe47270a59ef53098958c7456fd3378d0
-
SHA512
44c3f9e2aba1b7221f4ee77382de3a9a77fb2b06d5f3c1f141e5be152e3b3975f40743eac89cdf23fbe335d84e4e1fbf8a7e85c894f2854ae063a2ca718e48ba
-
SSDEEP
24576:Z81f1lnZUSbLSmSnfPcT+LlxMfCnHnjLJ1nqST1YYvHxZgqLnug5WeCgq6bcDIEJ:Z81f7ZUSqmSnZZxjHjz1YYvRtuaWeCgq
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Modifies Internet Explorer settings 1 TTPs 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\$TEMP\VirtualDub.exe"C:\Users\Admin\AppData\Local\Temp\$TEMP\VirtualDub.exe"1⤵
- System Location Discovery: System Language Discovery
- Modifies Internet Explorer settings
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
132KB