Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
25/01/2025, 08:55
Behavioral task
behavioral1
Sample
Pro hacker.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Pro hacker.exe
Resource
win10v2004-20241007-en
General
-
Target
Pro hacker.exe
-
Size
7.6MB
-
MD5
f53b6e065812a8a47c4fff668aec20ed
-
SHA1
06b304521978a783038e99708ff2ecfd54899f8f
-
SHA256
81a0e82d509ea367d93f1dba72621e320ab4c0207d7b45e8808401d1e1fc6199
-
SHA512
5d25ba70a1e27d5379d8a7b53bd620e2a8bef5a54c54edc0cf640d7d94a0a9bf241ce21a1b3fd3ee0b1dea8c66e3bad8762758c3ab93141684aa0aaf573a71d0
-
SSDEEP
196608:RuD+kd+rVwfI9jUCBB7m+mKOY7rXrZusooDmhfvsbnTNWH:A54raIHL7HmBYXrYoaUNM
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 2956 Pro hacker.exe -
resource yara_rule behavioral1/files/0x000500000001963b-21.dat upx behavioral1/memory/2956-23-0x000007FEF5E40000-0x000007FEF64A5000-memory.dmp upx -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 2396 wrote to memory of 2956 2396 Pro hacker.exe 30 PID 2396 wrote to memory of 2956 2396 Pro hacker.exe 30 PID 2396 wrote to memory of 2956 2396 Pro hacker.exe 30
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.8MB
MD59a3d3ae5745a79d276b05a85aea02549
SHA1a5e60cac2ca606df4f7646d052a9c0ea813e7636
SHA25609693bab682495b01de8a24c435ca5900e11d2d0f4f0807dae278b3a94770889
SHA51246840b820ee3c0fa511596124eb364da993ec7ae1670843a15afd40ac63f2c61846434be84d191bd53f7f5f4e17fad549795822bb2b9c792ac22a1c26e5adf69