Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    19/09/2024, 02:27

General

  • Target

    NETFLIX Checker Account By X-KILLER/._cache_NETFLIX Checker Account By X-KILLER.exe

  • Size

    538KB

  • MD5

    867f1fbc0a5d89a100d4fe867fa4b34f

  • SHA1

    a41eb575ac101f0954d074932eebcd916ce0023b

  • SHA256

    e22c7f85f00cc4a5219d23ead9ae28897ebea30d09b39387456c1f4fd4541ce5

  • SHA512

    6e71eae56d521d0f62abf605f7181bee429e878aa96853e8e95e0512bb2f5a1c93191ab9afbaf3409d61f78ee4decb6581c7764daaa53bc35ad4c1c77b9ecbfa

  • SSDEEP

    12288:dyqVfhoCeZzPde+4ZJwpBeV8Agn+X+n9B5tLA1zXKZrnkRkEp:dyq4CeZTdp4ZJSK2i+n9B5t0Ag

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 16 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\NETFLIX Checker Account By X-KILLER\._cache_NETFLIX Checker Account By X-KILLER.exe
    "C:\Users\Admin\AppData\Local\Temp\NETFLIX Checker Account By X-KILLER\._cache_NETFLIX Checker Account By X-KILLER.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3044

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\SkinSoft\VisualStyler\2.3.5.0\x64\ssapihook.dll

    Filesize

    66KB

    MD5

    c74d260d388f5ac3d95d8c1c3a27c989

    SHA1

    5da009086036004a7c670d608d5e1e923aead568

    SHA256

    dc1bebb8ce88d59e4b3130c1ff2c4b7f5df2701c7a71b476b8a6f2ed541db628

    SHA512

    6460db8f73806017d267c0e4e112902956a3bc53853c6a893cff66fe44772305b2c158ef8b58e993806d713aceaddcf2efa7ccf625063678444d3fd20b10546a

  • memory/3044-17-0x000000001A860000-0x000000001A861000-memory.dmp

    Filesize

    4KB

  • memory/3044-28-0x000007FEF4C80000-0x000007FEF566C000-memory.dmp

    Filesize

    9.9MB

  • memory/3044-3-0x00000000002C0000-0x00000000002E4000-memory.dmp

    Filesize

    144KB

  • memory/3044-4-0x00000000002F0000-0x00000000002F6000-memory.dmp

    Filesize

    24KB

  • memory/3044-5-0x000007FEF4C80000-0x000007FEF566C000-memory.dmp

    Filesize

    9.9MB

  • memory/3044-6-0x000000001BC90000-0x000000001BD88000-memory.dmp

    Filesize

    992KB

  • memory/3044-1-0x00000000012E0000-0x000000000136C000-memory.dmp

    Filesize

    560KB

  • memory/3044-12-0x000007FEF4C80000-0x000007FEF566C000-memory.dmp

    Filesize

    9.9MB

  • memory/3044-11-0x0000000000C10000-0x0000000000C11000-memory.dmp

    Filesize

    4KB

  • memory/3044-13-0x0000000001130000-0x0000000001131000-memory.dmp

    Filesize

    4KB

  • memory/3044-14-0x00000000012C0000-0x00000000012C1000-memory.dmp

    Filesize

    4KB

  • memory/3044-18-0x000000001ACB0000-0x000000001ACB1000-memory.dmp

    Filesize

    4KB

  • memory/3044-2-0x000000001ADD0000-0x000000001AE7E000-memory.dmp

    Filesize

    696KB

  • memory/3044-16-0x000000001A850000-0x000000001A851000-memory.dmp

    Filesize

    4KB

  • memory/3044-15-0x00000000012D0000-0x00000000012D1000-memory.dmp

    Filesize

    4KB

  • memory/3044-19-0x000000001ACC0000-0x000000001ACC1000-memory.dmp

    Filesize

    4KB

  • memory/3044-20-0x000000001AF70000-0x000000001AF71000-memory.dmp

    Filesize

    4KB

  • memory/3044-21-0x000000001AF80000-0x000000001AF81000-memory.dmp

    Filesize

    4KB

  • memory/3044-22-0x000000001B200000-0x000000001B201000-memory.dmp

    Filesize

    4KB

  • memory/3044-23-0x000000001B210000-0x000000001B211000-memory.dmp

    Filesize

    4KB

  • memory/3044-24-0x000000001B220000-0x000000001B221000-memory.dmp

    Filesize

    4KB

  • memory/3044-25-0x000007FE7B290000-0x000007FE7B291000-memory.dmp

    Filesize

    4KB

  • memory/3044-26-0x000007FE7B2C0000-0x000007FE7B2C1000-memory.dmp

    Filesize

    4KB

  • memory/3044-27-0x000007FE7B2D0000-0x000007FE7B2D1000-memory.dmp

    Filesize

    4KB

  • memory/3044-0-0x000007FEF4C83000-0x000007FEF4C84000-memory.dmp

    Filesize

    4KB

  • memory/3044-29-0x000007FEF4C83000-0x000007FEF4C84000-memory.dmp

    Filesize

    4KB

  • memory/3044-30-0x000007FEF4C80000-0x000007FEF566C000-memory.dmp

    Filesize

    9.9MB