Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    59s
  • max time network
    159s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    29/10/2022, 04:16

General

  • Target

    499a7aae82fd4c1903c92c4f1c0564886fce70cb94ab3bd33395e0e5fe2f9b85.exe

  • Size

    313KB

  • MD5

    bcc11e659bce817533b43dad3c23da61

  • SHA1

    cfecfe4a4f718dedad1f17e96388cf6933fd78ef

  • SHA256

    499a7aae82fd4c1903c92c4f1c0564886fce70cb94ab3bd33395e0e5fe2f9b85

  • SHA512

    77f7db44e55c55207a6531cf7832fc2a69edbafb68fd42a85599e1c92f227d829d1c0ba808741eeea7fdd6008ef528801c12aa846dc0012b480f2e014e90484d

  • SSDEEP

    6144:frK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0LH:fryu6/eIo4vMResyEf0uP9d9UG0H

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\499a7aae82fd4c1903c92c4f1c0564886fce70cb94ab3bd33395e0e5fe2f9b85.exe
    "C:\Users\Admin\AppData\Local\Temp\499a7aae82fd4c1903c92c4f1c0564886fce70cb94ab3bd33395e0e5fe2f9b85.exe"
    1⤵
    • Loads dropped DLL
    PID:1992

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\TsuD74F297D.dll

    Filesize

    27KB

    MD5

    7d96698817f7573fc81cc7eaa578b3c6

    SHA1

    1204a4aae95a868bac7e74fe4dd336149859ba70

    SHA256

    5a22c47de0a320734a4ea4d99e8d6261151096ee6a3f67d2e98ad96aafb38e4e

    SHA512

    9d4852a68335f9594e7be8086031209690db689135408d8f76614aae59a10da4cfeee838399e448812a51c5fc040ee24bd6f54a7272359d248df2a756e389f00

  • \Users\Admin\AppData\Local\Temp\{322B3290-F72C-4E62-AC89-BF0EE9C81066}\Custom.dll

    Filesize

    30KB

    MD5

    a56cf143c72cee94f418548afed103e4

    SHA1

    65def5a6abf93abfa776414b24aebae80f2843bc

    SHA256

    024f4db0e479be41f1b480eb24a6db967be77bac64e12ffe15e8c324d2c022a7

    SHA512

    6e91cb952cc2b2b98e6ec38196ab4c861904e1e503e70ad42ab94de410cdb5290b9e82135bf5878a55ae20ec6f2252f0d13c352122ee3dc3967d887047530bcd

  • \Users\Admin\AppData\Local\Temp\{322B3290-F72C-4E62-AC89-BF0EE9C81066}\_Setup.dll

    Filesize

    23KB

    MD5

    00044de893b2e6e8aaa4fdf3a8df7cb3

    SHA1

    e8fc452e37917c3faf03a39457730f95fc9a31a0

    SHA256

    f62dc84d175b79bef83e2d8bdfe8a93fa179ca5dfdf3aeab2c4a7c956f68bb28

    SHA512

    6d80f4be89d8dab81b6ecec15498583a54e3d975f5fb0484872349f1fc0ff6d18d782362b9635060150423a58a8afe73b1d0787e5d0e3d4e15c0706e8dbbeabc

  • memory/1992-55-0x0000000076121000-0x0000000076123000-memory.dmp

    Filesize

    8KB