Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

6d0ce7ee92...43.exe

windows7-x64

7

6d0ce7ee92...43.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    38s
  • max time network
    185s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    29/10/2022, 02:36

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    6d0ce7ee9278ea2ea4d52693f01282c34453aa8d105e72017edec2add6fbfc43.exe

  • Size

    327KB

  • MD5

    d05a6577dea1d3ced647ebac687a53e2

  • SHA1

    5a3985f80527cd484110047fd123041456c822e1

  • SHA256

    6d0ce7ee9278ea2ea4d52693f01282c34453aa8d105e72017edec2add6fbfc43

  • SHA512

    d4ef5f9b38c8eb764038dc6f1ef3beaa9c5bece6ca653706bf2b6fee17b5c232a7089f61b9d221ac341e1a23d7f8116e8b08eda7b1e2163c81683c101975e187

  • SSDEEP

    6144:Jr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6F7u:Jr4iu6/eIo4Rsw33AtsmQz

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\6d0ce7ee9278ea2ea4d52693f01282c34453aa8d105e72017edec2add6fbfc43.exe
    "C:\Users\Admin\AppData\Local\Temp\6d0ce7ee9278ea2ea4d52693f01282c34453aa8d105e72017edec2add6fbfc43.exe"
    1⤵
    • Loads dropped DLL
    PID:948

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\Tsu796752B5.dll
    Filesize

    28KB

    MD5

    596e808d3bc049342f3f7f51e827a247

    SHA1

    29969a4b6593b058d6e500064f2c56479a24a1fe

    SHA256

    37020007e88faadf0d4fed797f845f6a3f06121544faf9e957744ea53d305b4f

    SHA512

    98c2d0e0d8c32d9eca5b01bd154d8104c1934e87075e9b2b52696ebb048c0fec161a6dfac84ac2ae52db80e04591e37b04306c0047e361ea5ac203e8f53b504c

    Download Submit

  • \Users\Admin\AppData\Local\Temp\{CCFC5B2A-E5C3-4337-A1DC-ADE1171F79DC}\Custom.dll
    Filesize

    21KB

    MD5

    c6849364badb4d88a6ddd0e2bdf55cd6

    SHA1

    9323ac056ecef28d145765cda500e05ae9196dd5

    SHA256

    21dc371bd5e1ecd81a54b8d22e8df5e81cba6c565e2c735797a78b3922b08c26

    SHA512

    5a6604ce4769be5c09fa43e54df24905f20f5a1f2b3b02b2284ea81e497fbaecc1bcfde3df79086489b2af106a83c8034d63c2438f96bae7acd5b472358b6cfd

    Download Submit

  • \Users\Admin\AppData\Local\Temp\{CCFC5B2A-E5C3-4337-A1DC-ADE1171F79DC}\_Setup.dll
    Filesize

    16KB

    MD5

    91d238925ee8c727003e8782918d2835

    SHA1

    bda687180470aa334b41a53228196b489da4a736

    SHA256

    b11de14cd6c1e69368e8bfa74f032e5336750ca38d503bb0a7ff67605373b3d7

    SHA512

    27db0aafdaa6be019adb0ddba3f01a7d6706cd03a649df3c42db02be73c3ca1eb9f707f611db74fd625497e579427455bde2e386d48a3c40713776de84e2d594

    Download Submit

  • memory/948-55-0x0000000075141000-0x0000000075143000-memory.dmp

    Filesize

    8KB

    Download