Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
151s -
max time network
107s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
-
submitted
19/09/2022, 17:56
General
-
Target
6c7471cb8ee9130dd174756e19dd4f312f8b9e615978b9e23a2c2189f9d77d4c.exe
-
Size
196KB
-
MD5
040d3833f44772b2a8d900462289104e
-
SHA1
ac76e0a17aa5ee3cc2628c7fb0fd52d1d0abd690
-
SHA256
6c7471cb8ee9130dd174756e19dd4f312f8b9e615978b9e23a2c2189f9d77d4c
-
SHA512
cd1cdb1f416a4fec7fd833d1a8fef71fa95fb2a7c47b7190d3bc5fb16b7535283afc159d8f4ccdf279359bd27f89b41db07fd687441e1f44761fb1a6a638e597
-
SSDEEP
6144:zX24tuEsyR55eQdlkKW9m+8IRGRuL1F2seElo9:L24IyH5jkmIYRuL1Mseuc
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Adds Run key to start application 2 TTPs 2 IoCs
-
Drops file in Windows directory 4 IoCs
-
Modifies Internet Explorer settings 1 TTPs 2 IoCs
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\6c7471cb8ee9130dd174756e19dd4f312f8b9e615978b9e23a2c2189f9d77d4c.exe"C:\Users\Admin\AppData\Local\Temp\6c7471cb8ee9130dd174756e19dd4f312f8b9e615978b9e23a2c2189f9d77d4c.exe"1⤵
- Drops file in Windows directory
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of WriteProcessMemory
-
C:\Windows\Nlacea.exeC:\Windows\Nlacea.exe2⤵
- Executes dropped EXE
- Adds Run key to start application
- Modifies Internet Explorer settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
-
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
196KB
MD5040d3833f44772b2a8d900462289104e
SHA1ac76e0a17aa5ee3cc2628c7fb0fd52d1d0abd690
SHA2566c7471cb8ee9130dd174756e19dd4f312f8b9e615978b9e23a2c2189f9d77d4c
SHA512cd1cdb1f416a4fec7fd833d1a8fef71fa95fb2a7c47b7190d3bc5fb16b7535283afc159d8f4ccdf279359bd27f89b41db07fd687441e1f44761fb1a6a638e597
-
Filesize
408B
MD50c9049a841eb9f8cec9d7685186eef6f
SHA13c5ee7c0a79987c67fad3c5e57afee30a0309542
SHA2561037b8b1a6b3950b8dd178961b26e17c8a2043c747cd67f5b5f69c77a3a67119
SHA512505c5ed19854baa488125291ed4a0606c14eb7e33b682983093fa07ca6a555926acb6fde7c30796c3e1647d7a85eeacb4db3d90f9b09695b7ba046a5509532d3
-
Filesize
8KB
-
Filesize
40KB
-
Filesize
292KB
-
Filesize
292KB
-
Filesize
292KB
-
Filesize
292KB