Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2s
  • max time network
    67s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    29/10/2022, 08:18

General

  • Target

    2abda71f651367808e15ceeb64314bb606915cb1c7df9de3bbb22334d11bb23d.exe

  • Size

    257KB

  • MD5

    c4dd34924cd8ac755ae807c42a0655ef

  • SHA1

    1531fc50ff992067575f10e8b924c169752f2491

  • SHA256

    2abda71f651367808e15ceeb64314bb606915cb1c7df9de3bbb22334d11bb23d

  • SHA512

    607ba6ea8fe0674caf3b35c1a74d7fa31f8ce1540c3591519018bbf65f34e9647fc662612e9fd1b60a686fbe48862a0c1626c318feb6b008eb9412a456612d82

  • SSDEEP

    6144:le7FvgPpolXmratgGet6XTBApGmf4b45b:4xUoAra9jBYbAb45b

Score
6/10

Malware Config

Signatures

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

Processes

  • C:\Users\Admin\AppData\Local\Temp\2abda71f651367808e15ceeb64314bb606915cb1c7df9de3bbb22334d11bb23d.exe
    "C:\Users\Admin\AppData\Local\Temp\2abda71f651367808e15ceeb64314bb606915cb1c7df9de3bbb22334d11bb23d.exe"
    1⤵
      PID:1012

    Network

    MITRE ATT&CK Enterprise v6

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1012-54-0x00000000763F1000-0x00000000763F3000-memory.dmp

      Filesize

      8KB

    • memory/1012-59-0x0000000000400000-0x0000000000427000-memory.dmp

      Filesize

      156KB

    • memory/1012-55-0x0000000000380000-0x00000000003AF000-memory.dmp

      Filesize

      188KB