Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    146s
  • max time network
    45s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    11/10/2022, 09:01

General

  • Target

    8e0974f102ee4c3ec2dca6e79eeebf896f8c83e6b4d76ba027d23c6a525f14ff.exe

  • Size

    110KB

  • MD5

    682259a576c0f735d61ab44de8990590

  • SHA1

    b75845afda5266cda38e72045e5c47e8bdcbcc0b

  • SHA256

    8e0974f102ee4c3ec2dca6e79eeebf896f8c83e6b4d76ba027d23c6a525f14ff

  • SHA512

    ce36a1f0ec11cdfce878ce158d1bf57d5b8dadee9286d3074612e1d56355ebf35f90c2843609bebde8c951431803742eda912ce41fd12a640ba39e508022c620

  • SSDEEP

    1536:JaiqH1s+kCtrA2UMT0mTFibDKa1Xm46PgGnLwfyhosxT/2Qu7Rv7YsDKRxssd:w1B31bdBob2QXCoQhZT/MlvYd

Score
10/10

Malware Config

Signatures

  • Modifies WinLogon for persistence 2 TTPs 1 IoCs
  • Drops file in System32 directory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\8e0974f102ee4c3ec2dca6e79eeebf896f8c83e6b4d76ba027d23c6a525f14ff.exe
    "C:\Users\Admin\AppData\Local\Temp\8e0974f102ee4c3ec2dca6e79eeebf896f8c83e6b4d76ba027d23c6a525f14ff.exe"
    1⤵
    • Modifies WinLogon for persistence
    • Drops file in System32 directory
    PID:1416

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads