Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    46s
  • max time network
    51s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    31/10/2022, 00:43

General

  • Target

    e6242baff24232d716b8c1902ba4421441406a9da1087abd0f6cb8a3280d568f.exe

  • Size

    295KB

  • MD5

    9218856dff762f5ef5f77d6b70743cdb

  • SHA1

    7e24c0e05c9a727de3fdf0fb44b1222f92dcbbfa

  • SHA256

    e6242baff24232d716b8c1902ba4421441406a9da1087abd0f6cb8a3280d568f

  • SHA512

    3541da7c216742dd83f6a2d038f550c011d284f82d31be20edf1e37dffdec38a9f268158418cbd85900b6a926a8646e24bec2a9496cb9586987fc1e7c07455d5

  • SSDEEP

    6144:/bCMVjsq0UsAckwmmUaK9qU8LQKn1/4GHgEg:/bCeeXkPRaK4LQqJ7Hng

Score
6/10

Malware Config

Signatures

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Windows directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\e6242baff24232d716b8c1902ba4421441406a9da1087abd0f6cb8a3280d568f.exe
    "C:\Users\Admin\AppData\Local\Temp\e6242baff24232d716b8c1902ba4421441406a9da1087abd0f6cb8a3280d568f.exe"
    1⤵
    • Drops file in Windows directory
    PID:1324

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1324-54-0x00000000752B1000-0x00000000752B3000-memory.dmp

    Filesize

    8KB

  • memory/1324-55-0x00000000000C0000-0x00000000000EF000-memory.dmp

    Filesize

    188KB