Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    4s
  • max time network
    111s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    29/10/2022, 02:31

General

  • Target

    7ca657ce283bcc671ecf9d2620e03ca8bab27eb7fd4fe1bb06e04b301ee02daf.exe

  • Size

    304KB

  • MD5

    a72dc570d644d3582ae401243845d39e

  • SHA1

    925d779b924b1fec6819479817a97967417fe17a

  • SHA256

    7ca657ce283bcc671ecf9d2620e03ca8bab27eb7fd4fe1bb06e04b301ee02daf

  • SHA512

    5eb12323d3e6f0028ef2dc8d7b570c4e7afee2165c4deff01182ff225f0bcac647f1706be82176eb4b01f10ec836010e9ef2045e29ed42b24efd48653590163c

  • SSDEEP

    6144:1rkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyP2:1rkuu6/eIo4tQW62T+uTwM6YVxm242

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\7ca657ce283bcc671ecf9d2620e03ca8bab27eb7fd4fe1bb06e04b301ee02daf.exe
    "C:\Users\Admin\AppData\Local\Temp\7ca657ce283bcc671ecf9d2620e03ca8bab27eb7fd4fe1bb06e04b301ee02daf.exe"
    1⤵
    • Loads dropped DLL
    PID:1964

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\Tsu239D900B.dll

    Filesize

    14KB

    MD5

    1d7fa86807843226205565c37162eadc

    SHA1

    d5b7fd547ab3d308806cd526756b7c35cef60017

    SHA256

    67a3b53749ae6acaf1ae31599a765987612f3f979bf7838b5303a1b9c359b99d

    SHA512

    19d3d68d222202ec9779b3cba8270fe8d18ab889cee1e9c783ae78ee84e82477b5d041511aede853027ec4d4cc04c60bfad24d0dadc19e05c74d8783a9159a0f

  • \Users\Admin\AppData\Local\Temp\{8768D187-CCF9-4064-A28F-84DB5C8BF371}\Custom.dll

    Filesize

    23KB

    MD5

    58a46859dabfc998ac2d2d8b45446b80

    SHA1

    f337866f3a50ab6533f23b5c15af774ddf7cd1a2

    SHA256

    98d44a43d85a5bd1408cd9c2235fa44a94226f018e1bab84b835b028683910c2

    SHA512

    d9d85780872e57379d52795cfc7af01932fee0a2d1b180b1904d7ae98793df2dc10752a2dc7001dd8cba6b2f4cc9d1043f0d9365e06379e2c5ed25b246ed6a72

  • \Users\Admin\AppData\Local\Temp\{8768D187-CCF9-4064-A28F-84DB5C8BF371}\_Setup.dll

    Filesize

    15KB

    MD5

    d463054e76cbf183570a5cc5d7801a67

    SHA1

    9cacfd009c728ac7c4736b272e374ea0c3bea7e7

    SHA256

    8e0c847d68eaf9465d25f6eb106816e024c20877866e548330644e34aa3d22b3

    SHA512

    3e9336719a239f22df1457cfd3572ed118315a76f8975e9cc7c9619c404b47bd612ab69b4fadc30b3ea40171c403f2d92be068146bb409127a9edf883df12158

  • memory/1964-55-0x0000000075BA1000-0x0000000075BA3000-memory.dmp

    Filesize

    8KB