Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    140s
  • max time network
    149s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    01/10/2022, 18:21

General

  • Target

    e3e08b29cc1b4e57c251fa0692f111cd5349c3fa8fc242b7bc0734bbe6d579d7.exe

  • Size

    318KB

  • MD5

    7290dde0d822e421a9faa4c675b00fc5

  • SHA1

    0f4d9485d1cb08ccbea4319255e692dc0e1323c3

  • SHA256

    e3e08b29cc1b4e57c251fa0692f111cd5349c3fa8fc242b7bc0734bbe6d579d7

  • SHA512

    4276c585ffcfac4c60eb7e80c8c5dc465b1cfff62efb220481f05bd0edb98f562d43e9557c36d5f71cc94d3406d612209a6dff0aabd6ffeab0c5db8d6cc8b6e9

  • SSDEEP

    6144:5DNmhb9lwFZpCO/8w3nuRA71x0R6GTwgHQSifh6o0CUP:5DNmh3U/8w3uRAjA6KH9ifhQbP

Score
6/10

Malware Config

Signatures

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Maps connected drives based on registry 3 TTPs 2 IoCs

    Disk information is often read in order to detect sandboxing environments.

  • Drops file in Windows directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\e3e08b29cc1b4e57c251fa0692f111cd5349c3fa8fc242b7bc0734bbe6d579d7.exe
    "C:\Users\Admin\AppData\Local\Temp\e3e08b29cc1b4e57c251fa0692f111cd5349c3fa8fc242b7bc0734bbe6d579d7.exe"
    1⤵
    • Maps connected drives based on registry
    • Drops file in Windows directory
    PID:1268

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1268-54-0x00000000757A1000-0x00000000757A3000-memory.dmp

    Filesize

    8KB

  • memory/1268-55-0x00000000001B0000-0x00000000001DF000-memory.dmp

    Filesize

    188KB

  • memory/1268-59-0x00000000056E0000-0x0000000005707000-memory.dmp

    Filesize

    156KB