Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    46s
  • max time network
    51s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    06/11/2022, 23:06

General

  • Target

    69afe4d20510916ea922998b227413cce751f522be8d047a8b5fc6749f8cbaf2.exe

  • Size

    346KB

  • MD5

    01e13868b3abf4bb4df5c85e4c1f970d

  • SHA1

    6985504d8e071de3e7ad40a960223385ca25a928

  • SHA256

    69afe4d20510916ea922998b227413cce751f522be8d047a8b5fc6749f8cbaf2

  • SHA512

    d2a93c56b36ee5fd884553eebc3b9199acaf8046247093bd76fe31f753862bdbb7962a067a8d2d58ad16509c8f47e954da3447e20d09531d8a06c788cae69669

  • SSDEEP

    6144:kp5mTsD49eTnTDRz4v9+eu9BStINufOhR7PuClZV2AHln3+k:VTB9OSv5u9BSqufOT9Vln3+k

Score
6/10

Malware Config

Signatures

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Windows directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\69afe4d20510916ea922998b227413cce751f522be8d047a8b5fc6749f8cbaf2.exe
    "C:\Users\Admin\AppData\Local\Temp\69afe4d20510916ea922998b227413cce751f522be8d047a8b5fc6749f8cbaf2.exe"
    1⤵
    • Drops file in Windows directory
    PID:1204

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1204-54-0x0000000074DE1000-0x0000000074DE3000-memory.dmp

    Filesize

    8KB

  • memory/1204-55-0x00000000002B0000-0x00000000002DF000-memory.dmp

    Filesize

    188KB