Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
84s -
max time network
51s -
platform
windows7_x64 -
resource
win7-20220901-en -
resource tags
-
submitted
29/10/2022, 22:41
General
-
Target
51fe0b4d75875bfb02c84c8e24db264b26c166c35af61582f0a5cfa7019df53f.exe
-
Size
54KB
-
MD5
a34db65b6334e40b6c0abbc65feb334a
-
SHA1
653b37e093a587eb02e8a37fc77204c5a15d3f39
-
SHA256
51fe0b4d75875bfb02c84c8e24db264b26c166c35af61582f0a5cfa7019df53f
-
SHA512
7f0d8d47ee62ff4a8dcfadd429f7566e0ad1488cb2c092bd7e5044931f1080db942519f0ee33286a74e93479db4cb15857820bc770cbfcbb127f0a6e29d12e30
-
SSDEEP
1536:d9vD8aenGaV5KZb+OXmQ5wy1hSpc3vs9+WU:PvDgUb+O2Q5wMhwpj
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 2 IoCs
-
Modifies Internet Explorer settings 1 TTPs 2 IoCs
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Windows\Explorer.EXEC:\Windows\Explorer.EXE1⤵
-
C:\Users\Admin\AppData\Local\Temp\51fe0b4d75875bfb02c84c8e24db264b26c166c35af61582f0a5cfa7019df53f.exe"C:\Users\Admin\AppData\Local\Temp\51fe0b4d75875bfb02c84c8e24db264b26c166c35af61582f0a5cfa7019df53f.exe"2⤵
- Drops file in System32 directory
- Modifies Internet Explorer settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
80KB
-
Filesize
80KB
-
Filesize
40KB