Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    3s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    29/10/2022, 09:13

General

  • Target

    169965b4aa768e81355fb1d07cb197c119c6d2a1932572e57a692817fc27af9c.exe

  • Size

    313KB

  • MD5

    f733723d3e1786c4ba0883354fac9bb4

  • SHA1

    a84278611811254c9863522787112bf77c34330b

  • SHA256

    169965b4aa768e81355fb1d07cb197c119c6d2a1932572e57a692817fc27af9c

  • SHA512

    ac0bda85fe3a071825357efded5a7b19c69a24852e73ca72fa86dcfca12cbdc83b5663da1047a497beaf3c17020d9272f5f2d7aa9a65dd6649847ced9d3a1ca4

  • SSDEEP

    6144:orJ9uEo2S1YnQmCX492DkwNP3qpYFQiY0Z56GICaNRCVEumbcF6ov5d889PgLVDF:orfu6/eIo4jVW5soVCcQovoO0DJM+EO

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\169965b4aa768e81355fb1d07cb197c119c6d2a1932572e57a692817fc27af9c.exe
    "C:\Users\Admin\AppData\Local\Temp\169965b4aa768e81355fb1d07cb197c119c6d2a1932572e57a692817fc27af9c.exe"
    1⤵
    • Loads dropped DLL
    PID:108

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\TsuB34AE3FA.dll

    Filesize

    28KB

    MD5

    cb8ca2229bbac327194aef9fc1d0e2d9

    SHA1

    4f6da18a2d34be365fc1bf130f672c7571fe08d3

    SHA256

    084bb12275f63371b2f3d478fd5925d35e1166c2ebec74304b11179fdce1cc18

    SHA512

    06200b07dd2910813acb2dfe6a32f96787728a398be3be5e2b34554da72396ad058bc713f59908bd4e217d0c0da76b7d512a61712386e09e617d54906f8a6076

  • \Users\Admin\AppData\Local\Temp\{DDA790C7-F09B-4C12-AEF9-B8B90644B231}\Custom.dll

    Filesize

    12KB

    MD5

    9cf30886b9508bfb6a1ba3e89d9c6fbf

    SHA1

    5958f9007fcff37188f418b3357d16023a5e00b3

    SHA256

    281144f5b15a559dd2e582273b7b71e6fa2ab9d885df5bb107c3e504c7319dcd

    SHA512

    a3e15e4c1a1ac90eb395c1125b469f391c185c82009d08978445c788b06e8293c539c18b9daa6f892b9227aa5177c55120f8b26178086557cab3908dc2d40f8c

  • \Users\Admin\AppData\Local\Temp\{DDA790C7-F09B-4C12-AEF9-B8B90644B231}\_Setup.dll

    Filesize

    19KB

    MD5

    1821a6a6e093385c18dccf88e0d11a03

    SHA1

    8e5887ec62c8eabcfc98143d35dd162611bb1b6e

    SHA256

    ee89146e91e4a15ba13399f926ad989d0c817edce5d4e2eee144e629e06b8f55

    SHA512

    c5ad6cdd80a0ca106025ea83fb76ffec642d59b324d2a805feb47f4e38c9ea3d8dd9d9b06e359d0c91d3599040bc16d7be95ec6db8594499b22622fa4d4ad45d

  • memory/108-55-0x0000000075B41000-0x0000000075B43000-memory.dmp

    Filesize

    8KB