Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
93s -
max time network
103s -
platform
windows11-21h2_x64 -
resource
win11-20240802-en -
resource tags
-
submitted
30/09/2024, 08:51
General
-
Target
FS22_EngconEquipment.zip
-
Size
6.8MB
-
MD5
13ffc67ab02c7497f117a572763e7bc0
-
SHA1
0be60cd398da92e4c898fbcd4608ad8d9aee625a
-
SHA256
3aa2aa53503a3501ebd4700f0f0acaf839ea3c8c5cf6d6c92c43d0fbaa51e088
-
SHA512
7d9c0caa25c2cfa8ebc1bbfda0be046746e0025e2fc2e0d9ef161cc31d2037bf43cbfc923a90d5a3d6db8d4753d6c93d80b5a8120845feb7c4c752a4ee4fc0e2
-
SSDEEP
196608:O79oFNTUKA3Ym/1p9qUBunDkHCmhEK4w93tMNZP1X0//Kf1REzR:4oFxWYcvW+OMdMNZP1XSiTEzR
Score
1/10
Malware Config
Signatures
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\FS22_EngconEquipment.zip1⤵
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
-
C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe"C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe" -ServerName:MiniSearchUI.AppXj3y73at8fy1htwztzxs68sxx1v7cksp7.mca1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
10KB
MD53e1f5eeae74491d8850ef2c8b03a9a3b
SHA10c02c9c2550107de6dd0eb740ac5668f292883c0
SHA25666756c0edf3925de7bcb685385e2a4f0b854cffd796a9e90eb1ed064b1fb0e30
SHA5127637f0807d88dbceeb68823a044583e2248ac1ba73c000da6560f94075635a27d15970df7e52f8315bdc2f1c45cff6f1ab7690e916b58307a533f8df24329c2a