83fd2015a5499a8c2703d91aa047d0f099b85e8aa5ef9f2643a4eda4144a8772

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

6465e923bf...61.exe

windows7-x64

6465e923bf...61.exe

windows10-2004-x64

6677fcb62e...50.exe

windows7-x64

6677fcb62e...50.exe

windows10-2004-x64

691d9802fa...e9.exe

windows7-x64

691d9802fa...e9.exe

windows10-2004-x64

6a150e7eee...36.exe

windows7-x64

6a150e7eee...36.exe

windows10-2004-x64

6aa340437e...c2.exe

windows7-x64

6aa340437e...c2.exe

windows10-2004-x64

6c5bf2ea45...8f.exe

windows7-x64

6c5bf2ea45...8f.exe

windows10-2004-x64

6e40e3ab02...99.exe

windows7-x64

6e40e3ab02...99.exe

windows10-2004-x64

6f2c23f7e9...78.exe

windows7-x64

6f2c23f7e9...78.exe

windows10-2004-x64

788cfdaeb7...ed.exe

windows7-x64

788cfdaeb7...ed.exe

windows10-2004-x64

7cfc40d94f...f2.exe

windows7-x64

7cfc40d94f...f2.exe

windows10-2004-x64

7f237484f5...1d.exe

windows7-x64

7f237484f5...1d.exe

windows10-2004-x64

7f8bcaf3c1...5d.exe

windows7-x64

7f8bcaf3c1...5d.exe

windows10-2004-x64

863385d41f...34.exe

windows7-x64

863385d41f...34.exe

windows10-2004-x64

89c11885c2...31.exe

windows7-x64

89c11885c2...31.exe

windows10-2004-x64

8abccfea53...41.exe

windows7-x64

8abccfea53...41.exe

windows10-2004-x64

8ea7566ef3...44.exe

windows7-x64

8ea7566ef3...44.exe

windows10-2004-x64

Analysis

max time kernel
10s
max time network
17s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
11/03/2025, 07:59

Sharing

Copy URL

Twitter E-mail

Static task

static1

16 signatures

Behavioral task

behavioral1

Sample

6465e923bf241700a250f531b63fc650c66e97c5affa1f70a0aa6a75bf63b561.exe

Resource

win7-20240729-en

dcrat defense_evasion execution infostealer persistence rat trojan

windows7-x64

20 signatures

150 seconds

Behavioral task

behavioral2

Sample

6465e923bf241700a250f531b63fc650c66e97c5affa1f70a0aa6a75bf63b561.exe

Resource

win10v2004-20250217-en

dcrat defense_evasion execution infostealer persistence rat trojan

windows10-2004-x64

22 signatures

150 seconds

Behavioral task

behavioral3

Sample

6677fcb62e94c51701129d45bf8b4fe7fc3c570c60a95e67939c4c2830e9d250.exe

Resource

win7-20250207-en

discovery

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

6677fcb62e94c51701129d45bf8b4fe7fc3c570c60a95e67939c4c2830e9d250.exe

Resource

win10v2004-20250217-en

discovery

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral5

Sample

691d9802facb4880b056112b035368f77f5f23a56c59a895ae5d1f5182ddbce9.exe

Resource

win7-20240903-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

691d9802facb4880b056112b035368f77f5f23a56c59a895ae5d1f5182ddbce9.exe

Resource

win10v2004-20250217-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

6a150e7eee969746cc6cc4579d13d2fd6cef5bdc77223aa24e9a6c1c6bf7b036.exe

Resource

win7-20240729-en

defense_evasion execution spyware stealer

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral8

Sample

6a150e7eee969746cc6cc4579d13d2fd6cef5bdc77223aa24e9a6c1c6bf7b036.exe

Resource

win10v2004-20250217-en

defense_evasion execution spyware stealer

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral9

Sample

6aa340437e5bb3c895cbef7775c0694b2fa44692f995e85a64dca6e8f0e250c2.exe

Resource

win7-20240903-en

defense_evasion evasion persistence trojan

windows7-x64

21 signatures

150 seconds

Behavioral task

behavioral10

Sample

6aa340437e5bb3c895cbef7775c0694b2fa44692f995e85a64dca6e8f0e250c2.exe

Resource

win10v2004-20250217-en

defense_evasion evasion persistence trojan

windows10-2004-x64

20 signatures

150 seconds

Behavioral task

behavioral11

Sample

6c5bf2ea45920850b041a5a75288570d464ce6c27da4f16c5f25106089985f8f.exe

Resource

win7-20240903-en

xworm rat trojan

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral12

Sample

6c5bf2ea45920850b041a5a75288570d464ce6c27da4f16c5f25106089985f8f.exe

Resource

win10v2004-20250217-en

xworm rat trojan

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral13

Sample

6e40e3ab026935212a686af172ed8403d196cfaf350b91915ac31a33d81b3799.exe

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

6e40e3ab026935212a686af172ed8403d196cfaf350b91915ac31a33d81b3799.exe

Resource

win10v2004-20250217-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

6f2c23f7e99a6712509c9f30f9ce3dcd9ea2bfd6ea020ed3b8dcb3641bd34478.exe

Resource

win7-20240903-en

discovery

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral16

Sample

6f2c23f7e99a6712509c9f30f9ce3dcd9ea2bfd6ea020ed3b8dcb3641bd34478.exe

Resource

win10v2004-20250217-en

discovery

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral17

Sample

788cfdaeb7e97e9b24de3cb416d2f88a373d4813a0d362902731f54f519ad3ed.exe

Resource

win7-20241023-en

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral18

Sample

788cfdaeb7e97e9b24de3cb416d2f88a373d4813a0d362902731f54f519ad3ed.exe

Resource

win10v2004-20250217-en

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral19

Sample

7cfc40d94f3ffc3a8c3c8824f031dcbb07d673cfa1fc7dd6ed02e3ca01c326f2.exe

Resource

win7-20240903-en

discovery

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral20

Sample

7cfc40d94f3ffc3a8c3c8824f031dcbb07d673cfa1fc7dd6ed02e3ca01c326f2.exe

Resource

win10v2004-20250217-en

discovery

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral21

Sample

7f237484f5bd1786c2c4eceb85b121443a11f98e62273da8a2b4835ab6c1971d.exe

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

7f237484f5bd1786c2c4eceb85b121443a11f98e62273da8a2b4835ab6c1971d.exe

Resource

win10v2004-20250217-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

7f8bcaf3c125b12f6b8cc4cd98bfe089b433753bed821414b1fcf6b958b1935d.exe

Resource

win7-20240729-en

quasar office04 spyware trojan

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral24

Sample

7f8bcaf3c125b12f6b8cc4cd98bfe089b433753bed821414b1fcf6b958b1935d.exe

Resource

win10v2004-20250217-en

quasar office04 spyware trojan

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral25

Sample

863385d41fea84d79d3ded4aec09ae9a6d71ce80f16ebfef20752f65e4ac5834.exe

Resource

win7-20241023-en

vipkeylogger collection discovery keylogger spyware stealer

windows7-x64

14 signatures

150 seconds

Behavioral task

behavioral26

Sample

863385d41fea84d79d3ded4aec09ae9a6d71ce80f16ebfef20752f65e4ac5834.exe

Resource

win10v2004-20250217-en

vipkeylogger collection discovery keylogger spyware stealer

windows10-2004-x64

14 signatures

150 seconds

Behavioral task

behavioral27

Sample

89c11885c24f281671cc737a808764a62e128a0dad890ae6d444d14d682e2631.exe

Resource

win7-20240903-en

stormkitty discovery stealer

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral28

Sample

89c11885c24f281671cc737a808764a62e128a0dad890ae6d444d14d682e2631.exe

Resource

win10v2004-20250217-en

stormkitty collection discovery persistence privilege_escalation spyware stealer

windows10-2004-x64

17 signatures

150 seconds

Behavioral task

behavioral29

Sample

8abccfea539da5a03d784ff60d88d128a3f901e9a9ae51ddb3caf0e05e192341.exe

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

8abccfea539da5a03d784ff60d88d128a3f901e9a9ae51ddb3caf0e05e192341.exe

Resource

win10v2004-20250217-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

8ea7566ef322ea6fec4ec75f7aed5fd8dad6adceab78f6ea5b557ef925b6a644.exe

Resource

win7-20240903-en

remcos host discovery persistence rat spyware stealer

windows7-x64

13 signatures

150 seconds

Behavioral task

behavioral32

Sample

8ea7566ef322ea6fec4ec75f7aed5fd8dad6adceab78f6ea5b557ef925b6a644.exe

Resource

win10v2004-20250217-en

remcos host discovery persistence rat spyware stealer

windows10-2004-x64

13 signatures

150 seconds

Report Analysis Logs

General

Target

7f237484f5bd1786c2c4eceb85b121443a11f98e62273da8a2b4835ab6c1971d.exe
Size

471KB
MD5

a5863ea9f1b901be3f78db2e5373c9b4
SHA1

32305c7986231de4bddcda16ece0e854d058c38e
SHA256

7f237484f5bd1786c2c4eceb85b121443a11f98e62273da8a2b4835ab6c1971d
SHA512

02e2966226cafed66bcc008eb4e76fc3eae7eeb23047d2cfecf111d2a7a832e49e9c42e0c8fbb10f05c080a26094d60d6bdf3041d52513bbe0e54bb8df2567ea
SSDEEP

12288:zKwW4X8GPhBHUsf2kiRc0XwEr7e+o3eQOk:75BHxgAE+++

Score

1^/10

Malware Config

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\7f237484f5bd1786c2c4eceb85b121443a11f98e62273da8a2b4835ab6c1971d.exe
"C:\Users\Admin\AppData\Local\Temp\7f237484f5bd1786c2c4eceb85b121443a11f98e62273da8a2b4835ab6c1971d.exe"
1⤵
PID:2652

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2652-0-0x000007FEF5DB3000-0x000007FEF5DB4000-memory.dmp

Filesize
4KB

Download
memory/2652-1-0x00000000003B0000-0x000000000042C000-memory.dmp

Filesize
496KB

Download