Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

558a10a04f...d0.exe

windows7-x64

7

558a10a04f...d0.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    2s
  • max time network
    47s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    29/10/2022, 03:02

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    558a10a04f3f8b20cec832842609f47b9561b26722743d2cbc2334720e52c0d0.exe

  • Size

    314KB

  • MD5

    dec7481430e2b38da5d52cf730f3d5f7

  • SHA1

    89505309d5439a46c8dcd4e6c8927ed783224c92

  • SHA256

    558a10a04f3f8b20cec832842609f47b9561b26722743d2cbc2334720e52c0d0

  • SHA512

    3f11abefbc59fa3ae41248f386931500031652a73798ce649bdf47e8c0cfe86a72568d16db3653da64767959734c27192229e7e970e629333e4f5bd9d51e39b1

  • SSDEEP

    6144:drYbUzkuvcBYC47l2xa6g4FhwjZd/9d1XKxlo/ecwrHs59:drdkuveY36kjZP/XKxlSZAH0

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\558a10a04f3f8b20cec832842609f47b9561b26722743d2cbc2334720e52c0d0.exe
    "C:\Users\Admin\AppData\Local\Temp\558a10a04f3f8b20cec832842609f47b9561b26722743d2cbc2334720e52c0d0.exe"
    1⤵
    • Loads dropped DLL
    PID:1088
    • C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /c "C:\Users\Admin\AppData\Local\Temp\_tin5331.bat"
      2⤵
        PID:812

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\ProgramData\InstallMate\BC39127A\cfg\1.ini
      Filesize

      368B

      MD5

      3a9830a2f57ef1e602de02bd9cc8eb56

      SHA1

      5135a0295755e536b833c6c6010900ff99cdbabf

      SHA256

      8d138bedf3228f7ef9405940526a73f49395fd2917aa22e7d5596297e222da42

      SHA512

      87ed85acdc1509bb02e437f50e7a90695f66b2a7a996a526f0310ba277de9ce8d7343983e2ae0b5dbedcca832bb90da802d7182972f1b14be0a203cfbd14cc41

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\_tin5331.bat
      Filesize

      50B

      MD5

      1d460974cade289cecf964af7dfc34b5

      SHA1

      d5868c20895c92af52d391f5574b65f21e1f1b0f

      SHA256

      21c117dbcac11705f0b13ba1a22fac8b86b5b02102d12d0f264d9b815223d88c

      SHA512

      ac5cdc4136af67184005233787e9506dc852f29f4ae13e152176551aff16d9e4884a45e69c82a1eb8aa570972d2231de19dbfa2ff70881455749bdaaf2101999

      Download Submit

    • \Users\Admin\AppData\Local\Temp\TsuCD5E5FEE.dll
      Filesize

      15KB

      MD5

      59d77081f0b113f3573185b1211a9d37

      SHA1

      dfdaddd2a4d346996e2875b7787224856fdcd142

      SHA256

      6a8ae47daa69b0074fd3b1f610fbc2271c0619c304a2992b436bd0f89b109c42

      SHA512

      aeab4a142bd632bf633135e66541f607deaae8d5c5c9788b550ba3df724033bba07393aef10a6171bd74572e140dd92330b13b23523aa9a5f475f23d3dd564de

      Download Submit

    • \Users\Admin\AppData\Local\Temp\{1A5240C9-A724-4775-A59E-EF06C1B1623F}\Custom.dll
      Filesize

      11KB

      MD5

      757918c12ea5fc5c473e216ff3bd691a

      SHA1

      be80399e7827fc19045299200096ee42f50f6907

      SHA256

      b274141f936f7fbd59d2cf61c01a701499641436ee0e851e79a9dd369ab67260

      SHA512

      34323cb1269960f2a632cd6b8b7cba61acb942170c2db9da47890c893fc7f815285fd238f91aca78eecc16cd39d9967abf2932cd614af19b6894633e65ecc12c

      Download Submit

    • \Users\Admin\AppData\Local\Temp\{1A5240C9-A724-4775-A59E-EF06C1B1623F}\_Setup.dll
      Filesize

      49KB

      MD5

      a354a1bdb698aa6a4aada0a59bf2ef7d

      SHA1

      1b64e2b15b22dfa2a88aec37827bd3019b03b409

      SHA256

      80d67cb2734669bef95b6975e8289bcea28ee3f990615dcfe176a1e708771629

      SHA512

      ba41a1579338096e5567b0a83321b80d27ad361cf884538475e90f80b7df86f2ad80775a3bc1e09f2e315eec9a5548fdaea94de89c0f9700ad4583e9c61b4cda

      Download Submit

    • memory/1088-55-0x0000000074C91000-0x0000000074C93000-memory.dmp

      Filesize

      8KB

      Download