Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
41s -
max time network
47s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
03/10/2022, 04:11
Static task
static1
Behavioral task
behavioral1
Sample
19fcb9e3fabe062d7c2ee5a3abd289c864f7048aeaedf5af572fc1a5ead3372f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
19fcb9e3fabe062d7c2ee5a3abd289c864f7048aeaedf5af572fc1a5ead3372f.exe
Resource
win10v2004-20220812-en
General
-
Target
19fcb9e3fabe062d7c2ee5a3abd289c864f7048aeaedf5af572fc1a5ead3372f.exe
-
Size
40KB
-
MD5
443acc5be6e5da3f03e8908bcce7b8e5
-
SHA1
3cee4a3d47a50910c70af95e519d85c0ac3d7879
-
SHA256
19fcb9e3fabe062d7c2ee5a3abd289c864f7048aeaedf5af572fc1a5ead3372f
-
SHA512
a40e32e3061999a8649837bc92b0215aec57e6f128f4760f3f8f12512de1fbdab204d794ee32f4078cf0d476374bd3c5d8c544acba2bda9951599dfcb9a80428
-
SSDEEP
768:ZYcRSCGZ4Rg4JnvcXyhv6cFD0bMVZAjg2QOY26HeiTl3w:ZYcRSCGZ4JUihSED0AHAjRQt+iS
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 1960 19fcb9e3fabe062d7c2ee5a3abd289c864f7048aeaedf5af572fc1a5ead3372f.exe -
Drops file in System32 directory 2 IoCs
description ioc Process File created C:\Windows\SysWOW64\oledsp32.dl_ 19fcb9e3fabe062d7c2ee5a3abd289c864f7048aeaedf5af572fc1a5ead3372f.exe File created C:\Windows\SysWOW64\oledsp32.dll 19fcb9e3fabe062d7c2ee5a3abd289c864f7048aeaedf5af572fc1a5ead3372f.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1960 19fcb9e3fabe062d7c2ee5a3abd289c864f7048aeaedf5af572fc1a5ead3372f.exe 1960 19fcb9e3fabe062d7c2ee5a3abd289c864f7048aeaedf5af572fc1a5ead3372f.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\19fcb9e3fabe062d7c2ee5a3abd289c864f7048aeaedf5af572fc1a5ead3372f.exe"C:\Users\Admin\AppData\Local\Temp\19fcb9e3fabe062d7c2ee5a3abd289c864f7048aeaedf5af572fc1a5ead3372f.exe"1⤵
- Loads dropped DLL
- Drops file in System32 directory
- Suspicious use of SetWindowsHookEx
PID:1960
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
26KB
MD56db0debfb98119305df3801c4c2555e3
SHA103b6267361a197c2ee29af483bca73d15192c915
SHA256dcc50a77ef007040e97cf8001a743a7909db19be6b32af28feaa68d775fe2c4f
SHA5125a85de074db1a8bd32aba1a4b6837e2f7bee9ac7734331e77f02289a8b2c3bfde91734cdc525125d3c6800329e9a5f07b56f9d1dd8074b6df49684c90a181fb3