Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

c6cef43f21...1f.exe

windows7-x64

7

c6cef43f21...1f.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    3s
  • max time network
    55s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    29/10/2022, 08:55

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    c6cef43f211821c3e80d5102072649d2fec39af731b8cc612b4eb358f634481f.exe

  • Size

    316KB

  • MD5

    13edaa4187248c5fe05c31479bbc0ef8

  • SHA1

    6077ccd70aa15dd776c4ccd56e1e45b8ccb4f722

  • SHA256

    c6cef43f211821c3e80d5102072649d2fec39af731b8cc612b4eb358f634481f

  • SHA512

    be5e246f94c6aa1cc04f6363ca90c4d5db5ce2becbc2e44a7bbaaa22088e111422bd30bcd9b571c075f3d2ffe4c73b0d1c83a9114aa2a307f09590ae9cfdae5d

  • SSDEEP

    6144:GrvbUzkuvcBYC47l2xmDZH4xBsprVIvThDm9FdAZ+x99wVfl:GrkkuveY3zhlV6tmDxzwVfl

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c6cef43f211821c3e80d5102072649d2fec39af731b8cc612b4eb358f634481f.exe
    "C:\Users\Admin\AppData\Local\Temp\c6cef43f211821c3e80d5102072649d2fec39af731b8cc612b4eb358f634481f.exe"
    1⤵
    • Loads dropped DLL
    PID:1788

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\Tsu16CEA17F.dll
    Filesize

    6KB

    MD5

    fca3e8579f98aab57363102c0389e0ba

    SHA1

    73eced5dfc213e813f0f6638c08d8b41d0ec58e5

    SHA256

    b6a8844dcc0e58256bc4b1159d32daa822bc6b7da6ff8cc0c69822a58948e41e

    SHA512

    9d5ed943c785b29753a53ab9463cd00a02b8e2959c7ce3de43d85dfc03c6305dfd48692c55781b4fa614d3b60c9fd053ea2bb366798cf7857c3897a863693c5c

    Download Submit

  • \Users\Admin\AppData\Local\Temp\{F4610468-5CBA-40D3-A238-14982F82269E}\Custom.dll
    Filesize

    13KB

    MD5

    082c8b13cae1072e3a865deb285e28c4

    SHA1

    a82c65cd448293db1975ebdf5d9709c669beb275

    SHA256

    ff7f8a0e7e680fc68da67d90dd728d4488a0cf27bd31f8c175cdd933909ad20b

    SHA512

    ac80abb5d2715cf70a6952561317a4194345088aa72080dc1bc3f9919eec02d897dbd23c08510d9b22555da0293deb764f720875f6ac940cb50157862ffe2f3b

    Download Submit

  • \Users\Admin\AppData\Local\Temp\{F4610468-5CBA-40D3-A238-14982F82269E}\_Setup.dll
    Filesize

    22KB

    MD5

    196f3f921fb30bc4cb522b597affcce1

    SHA1

    22ad280dc5ceaba08ecc4f1649d733159ffebccb

    SHA256

    c87eb751f9a04586f2d222e616c54ac0bda2c048dd301ad403d99429d0ca0014

    SHA512

    afa8fbc122bafa5193b5efd6cee8fa271d7f439db775d7eb3e2c11627fb1ac2120248a559a414f52b8b835a143293051175cfe12e1a06711c8db8dadf42dd8b0

    Download Submit

  • memory/1788-55-0x0000000075091000-0x0000000075093000-memory.dmp

    Filesize

    8KB

    Download