Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    1s
  • max time network
    105s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    29/10/2022, 08:11

General

  • Target

    fc2b9eddb85ae334f69d153637d6bf56e68317623f3a690defd72ffc4bcab7c0.exe

  • Size

    313KB

  • MD5

    ecc81ec7ce72232a4b103cb8fa78d18c

  • SHA1

    f99a1679502b4c9302e246304df78f6869363693

  • SHA256

    fc2b9eddb85ae334f69d153637d6bf56e68317623f3a690defd72ffc4bcab7c0

  • SHA512

    6e743f74920cec24b6d4c9ec9ef61bd222f696e6a11ae7e020025d0b808ee7e6ac936dc37a348530a49e80d0e0ff67409637e50a0ea70b5e5c0a1cc617326bd8

  • SSDEEP

    6144:HrK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0Lt:Hryu6/eIo4vMResyEf0uP9d9UG0t

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\fc2b9eddb85ae334f69d153637d6bf56e68317623f3a690defd72ffc4bcab7c0.exe
    "C:\Users\Admin\AppData\Local\Temp\fc2b9eddb85ae334f69d153637d6bf56e68317623f3a690defd72ffc4bcab7c0.exe"
    1⤵
    • Loads dropped DLL
    PID:1972

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\Tsu84EAFA64.dll

    Filesize

    26KB

    MD5

    e2ddeca739d6f8e3e6cb765c5c71999e

    SHA1

    e2279da31837ece3ffa2f4a0cb4cb780c791edd2

    SHA256

    c7a1850facd31fd5c90a8568bc46b3340335984d0f7a8ca8db3005816a159449

    SHA512

    f5a2a12753c45fd2dab60d49897fffb203ffbd5c70a09dd76cadf1e188c78d843eed1957714c408c48c74db3947e9ab3773b926d51d931f54e33c6e45b67c9d6

  • \Users\Admin\AppData\Local\Temp\{1A5F4478-2679-4843-AAA8-6E5BC1BC668E}\Custom.dll

    Filesize

    53KB

    MD5

    297eba8e7c64ebfe9d0b0f168cb417f7

    SHA1

    9bd021a6d76886d4f34fd58cab552d5628caafcd

    SHA256

    58c693ea9e83c8b4e49dcdfb4f29da38d19f0e3cb30995d9aa3281d2d7c08fe4

    SHA512

    aa485943aa6d67c968d344468a66db7cc7bd65cdda23df29dd42c4411672874772e74ad7d7000569268027d6507f84adf356b2423588f789187895f5f47f0086

  • \Users\Admin\AppData\Local\Temp\{1A5F4478-2679-4843-AAA8-6E5BC1BC668E}\_Setup.dll

    Filesize

    29KB

    MD5

    dd4b42b51a7571141e092155e445630b

    SHA1

    c3def8465e16a8e3432e6763e00bdb091fcbe02c

    SHA256

    350f5e7285c918a87733c0d0cc732388a50d271aa8e2c9b5f5e6d30b676a93a9

    SHA512

    234d38bb675cc5fdb6bdefeff8434b6b61a88baedba56bbc5e618bf525c7f583e8ecbf6b3d4072392b6dc8ae0fde77ebd00bfa6bea70d4b2a8e182330c1423bb

  • memory/1972-55-0x0000000075501000-0x0000000075503000-memory.dmp

    Filesize

    8KB