Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    1s
  • max time network
    73s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    29/10/2022, 03:26

General

  • Target

    7ceb3adb8e538da7963d32fe0a94614a767b16fa7c29260e77cb29cf8efefd69.exe

  • Size

    313KB

  • MD5

    b483adf889756aa29b2a104795a0733b

  • SHA1

    828786a07526dc49ec724d837bada701e3c24cbb

  • SHA256

    7ceb3adb8e538da7963d32fe0a94614a767b16fa7c29260e77cb29cf8efefd69

  • SHA512

    4262f3db60f25a7268a9f524bffb68f8748c0ef96f9c996a94c8d90592c915a01ad8901c2075b380891ab26bfd9c0441d9704f98c97f396cb9d343c894229693

  • SSDEEP

    6144:vrK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0LD:vryu6/eIo4vMResyEf0uP9d9UG0D

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\7ceb3adb8e538da7963d32fe0a94614a767b16fa7c29260e77cb29cf8efefd69.exe
    "C:\Users\Admin\AppData\Local\Temp\7ceb3adb8e538da7963d32fe0a94614a767b16fa7c29260e77cb29cf8efefd69.exe"
    1⤵
    • Loads dropped DLL
    PID:1504

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\Tsu1C3A86EE.dll

    Filesize

    17KB

    MD5

    130670af5283e1b2e852a9fe2e08acfd

    SHA1

    0beb788a4e0e257a1031859bee72757674cd278b

    SHA256

    6369f8048d0e0c720c9d4b5c7b8eb9add808875ba96fc6552fba9e77c75815fa

    SHA512

    308dccc9217a55bc9ab0e567066d40e40e243f263154faea16c96b4716df2d56cb7a035f52b55796c84c3b7168c26c5bcda0cf0f0cf562965598226a098d0098

  • \Users\Admin\AppData\Local\Temp\{246C8381-27FD-4DDF-AF34-6FDFFF8FA177}\Custom.dll

    Filesize

    30KB

    MD5

    b8fa27c16db70afaea5307eb7ee5c183

    SHA1

    8afa84fb8d909f3ec85118cab5a9df1fc4f35278

    SHA256

    51970420128e1cc16d0bf16ee55533418e974767d1b72458f5077d70ffbee907

    SHA512

    9a8dc8d6483c6f23f3f8ce737ce804ed715d97f6b5aaf6d13948016d96e8c64d6171a23ff8a44d8017257143d27b2c92b3ae9d7ce2ba0c0c271fe747bf094d63

  • \Users\Admin\AppData\Local\Temp\{246C8381-27FD-4DDF-AF34-6FDFFF8FA177}\_Setup.dll

    Filesize

    20KB

    MD5

    42041a0f9ecb8578ca2162b744ea66f4

    SHA1

    5aa64edb39aab623c42ccb5c62bd06f26ec465a3

    SHA256

    db678519acfe6323483e13c32944b9b175cefb477eefe140e5fe276663874c31

    SHA512

    00fd56bcc7628a6c4fe8b41a88244d0f42d72b476ea7f68667569183b5d074ad463deb44a01540a41cd642715f08e400b8ac8f7f8a6d1a697c22447fc9782d52

  • memory/1504-55-0x0000000075FB1000-0x0000000075FB3000-memory.dmp

    Filesize

    8KB