Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
140s -
max time network
149s -
platform
windows7_x64 -
resource
win7-20220901-en -
resource tags
arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system -
submitted
01/10/2022, 18:21
Static task
static1
Behavioral task
behavioral1
Sample
e3e08b29cc1b4e57c251fa0692f111cd5349c3fa8fc242b7bc0734bbe6d579d7.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e3e08b29cc1b4e57c251fa0692f111cd5349c3fa8fc242b7bc0734bbe6d579d7.exe
Resource
win10v2004-20220812-en
General
-
Target
e3e08b29cc1b4e57c251fa0692f111cd5349c3fa8fc242b7bc0734bbe6d579d7.exe
-
Size
318KB
-
MD5
7290dde0d822e421a9faa4c675b00fc5
-
SHA1
0f4d9485d1cb08ccbea4319255e692dc0e1323c3
-
SHA256
e3e08b29cc1b4e57c251fa0692f111cd5349c3fa8fc242b7bc0734bbe6d579d7
-
SHA512
4276c585ffcfac4c60eb7e80c8c5dc465b1cfff62efb220481f05bd0edb98f562d43e9557c36d5f71cc94d3406d612209a6dff0aabd6ffeab0c5db8d6cc8b6e9
-
SSDEEP
6144:5DNmhb9lwFZpCO/8w3nuRA71x0R6GTwgHQSifh6o0CUP:5DNmh3U/8w3uRAjA6KH9ifhQbP
Malware Config
Signatures
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Maps connected drives based on registry 3 TTPs 2 IoCs
Disk information is often read in order to detect sandboxing environments.
description ioc Process Key value enumerated \REGISTRY\MACHINE\SYSTEM\ControlSet001\services\Disk\Enum e3e08b29cc1b4e57c251fa0692f111cd5349c3fa8fc242b7bc0734bbe6d579d7.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\services\disk\enum e3e08b29cc1b4e57c251fa0692f111cd5349c3fa8fc242b7bc0734bbe6d579d7.exe -
Drops file in Windows directory 1 IoCs
description ioc Process File created C:\Windows\Tasks\GreatCooks.job e3e08b29cc1b4e57c251fa0692f111cd5349c3fa8fc242b7bc0734bbe6d579d7.exe