Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    89s
  • max time network
    102s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    03/10/2022, 20:30

General

  • Target

    2305d7608d5ab9b771028379f50498e23722e94b28a332fe961647acff3b2631.exe

  • Size

    318KB

  • MD5

    6ce4245f2a4b0f28e5c319104057cd3b

  • SHA1

    fcfd45b19a83dfcbc5c44f2a22040fd6d58a8a87

  • SHA256

    2305d7608d5ab9b771028379f50498e23722e94b28a332fe961647acff3b2631

  • SHA512

    335b73bf2b667df29addbf2cd200a74cd70b5b1e814ea477d8e8d266c8f98f1b345f753c2a28cab1eb6781c1a70d556e153b02f26b01aecf7c07b351f04a47cb

  • SSDEEP

    6144:Pn6qmYs1x+wxFjmf1fTc1u6QoCzbOn6AiO5MJUQ:P6+s1xoo1uDvviBhtQ

Score
6/10

Malware Config

Signatures

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Maps connected drives based on registry 3 TTPs 2 IoCs

    Disk information is often read in order to detect sandboxing environments.

  • Drops file in Windows directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2305d7608d5ab9b771028379f50498e23722e94b28a332fe961647acff3b2631.exe
    "C:\Users\Admin\AppData\Local\Temp\2305d7608d5ab9b771028379f50498e23722e94b28a332fe961647acff3b2631.exe"
    1⤵
    • Maps connected drives based on registry
    • Drops file in Windows directory
    PID:1688

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1688-54-0x0000000075601000-0x0000000075603000-memory.dmp

    Filesize

    8KB

  • memory/1688-55-0x00000000001B0000-0x00000000001DF000-memory.dmp

    Filesize

    188KB

  • memory/1688-59-0x0000000003B90000-0x0000000003BB7000-memory.dmp

    Filesize

    156KB