Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    50s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    20/10/2022, 15:01

General

  • Target

    c503b7af22262bbef1762deaef7b1a8590883b77efc139b133ce8746d8a75fe3.exe

  • Size

    957KB

  • MD5

    818719cc2ec98a8d8e6c1ba6bca973d9

  • SHA1

    cb9d68e38fe526fa86e2ca461b6b9df4776213af

  • SHA256

    c503b7af22262bbef1762deaef7b1a8590883b77efc139b133ce8746d8a75fe3

  • SHA512

    170910c363773e16160712d0237f53bbeffe582260083600f8e1a61c5a6d5b8c8896ad0e24c9a175a31c4a5ac621c57854d83bddec480a889345e1573cf42f68

  • SSDEEP

    1536:OKD0A2T3vLbsih9e8bTTpb/IgQmP9zKcTDB4w/UjlQ/dpKRq:352T3siXei5bcmP9JfUjW

Score
6/10

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 1 IoCs
  • Drops file in System32 directory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c503b7af22262bbef1762deaef7b1a8590883b77efc139b133ce8746d8a75fe3.exe
    "C:\Users\Admin\AppData\Local\Temp\c503b7af22262bbef1762deaef7b1a8590883b77efc139b133ce8746d8a75fe3.exe"
    1⤵
    • Adds Run key to start application
    • Drops file in System32 directory
    PID:1492

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1492-54-0x0000000000400000-0x000000000043F000-memory.dmp

    Filesize

    252KB

  • memory/1492-55-0x0000000000400000-0x000000000043F000-memory.dmp

    Filesize

    252KB