Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

4

Static

static

1

dyv.png

windows10-2004-x64

4

dyv.png

windows10-ltsc 2021-x64

4

Resubmissions

29/01/2025, 20:35

250129-zc5awaxngm 4

06/11/2024, 03:37

241106-d6jqdatjhv 10

Analysis

  • max time kernel
    93s
  • max time network
    95s
  • platform
    windows10-ltsc 2021_x64
  • resource
    win10ltsc2021-20250128-en
  • resource tags

    arch:x64arch:x86image:win10ltsc2021-20250128-enlocale:en-usos:windows10-ltsc 2021-x64system
  • submitted
    29/01/2025, 20:35

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    dyv.png

  • Size

    1.8MB

  • MD5

    11b7bbb67f673539b5a2c0f2962e3a80

  • SHA1

    7049f78608ddf8fcfedbf24724bcaf92794866f3

  • SHA256

    ec21bc5f665662e4492b99aaae389f5a132619ef73631118b6e2d3a3a231e275

  • SHA512

    c21d38a50fd8e4bec8027c6bd103d81b354afd2c1e1fdc581d016a40eaf9ffa879d50a39361dd36a8bf0197685161173b154c7902e8e861bb835bbbd79ba0b87

  • SSDEEP

    49152:oJkPBnd7Ez7fqZxqjbfb66iezYy/0eSOYseXW58n5:oJEEz7QxqjbOnezYy/ZVYXW58n5

Score
4/10

Malware Config

Signatures

  • Drops file in Windows directory 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Windows\system32\mspaint.exe
    "C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\dyv.png"
    1⤵
    • Drops file in Windows directory
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:2856
  • C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService
    1⤵
      PID:2656

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads