Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
134s -
max time network
171s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
-
submitted
23/11/2022, 23:58
General
-
Target
322c23e356c9d46bd42d140635f81add046d51f0dd11649995c2d7b707cb3b99.exe
-
Size
367KB
-
MD5
ded146214a283a5c58301f36553b751d
-
SHA1
e3794ad89f46ec2349f6d16604487f58e435b020
-
SHA256
322c23e356c9d46bd42d140635f81add046d51f0dd11649995c2d7b707cb3b99
-
SHA512
0eb82c4dc8b3e97f2c62c102de91405878cbc21c1b1f7799d7e023a7e00f45da0cc70eb69a863ece035695a00dd577f5bc907a546cc13dfd9f4cab298263b103
-
SSDEEP
6144:7VZwpRCPa7z+6TapPFaAa23dBCRzTVY+0GLz4MAyYf9GKa9lJjdR3GxXNY:hZu4akpPa2NBE0GLz4MAyYf9GKazJr3a
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Deletes itself 1 IoCs
-
Drops file in System32 directory 2 IoCs
-
Drops file in Windows directory 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
-
Suspicious behavior: MapViewOfSection 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 3 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\322c23e356c9d46bd42d140635f81add046d51f0dd11649995c2d7b707cb3b99.exe"C:\Users\Admin\AppData\Local\Temp\322c23e356c9d46bd42d140635f81add046d51f0dd11649995c2d7b707cb3b99.exe"1⤵
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\OTwfohVllJWvpIU.exeC:\Users\Admin\AppData\Local\Temp\322c23e356c9d46bd42d140635f81add046d51f0dd11649995c2d7b707cb3b99.exe2⤵
- Executes dropped EXE
- Deletes itself
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: MapViewOfSection
- Suspicious use of AdjustPrivilegeToken
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
367KB
MD5ded146214a283a5c58301f36553b751d
SHA1e3794ad89f46ec2349f6d16604487f58e435b020
SHA256322c23e356c9d46bd42d140635f81add046d51f0dd11649995c2d7b707cb3b99
SHA5120eb82c4dc8b3e97f2c62c102de91405878cbc21c1b1f7799d7e023a7e00f45da0cc70eb69a863ece035695a00dd577f5bc907a546cc13dfd9f4cab298263b103
-
Filesize
367KB
MD5ded146214a283a5c58301f36553b751d
SHA1e3794ad89f46ec2349f6d16604487f58e435b020
SHA256322c23e356c9d46bd42d140635f81add046d51f0dd11649995c2d7b707cb3b99
SHA5120eb82c4dc8b3e97f2c62c102de91405878cbc21c1b1f7799d7e023a7e00f45da0cc70eb69a863ece035695a00dd577f5bc907a546cc13dfd9f4cab298263b103
-
Filesize
200KB
-
Filesize
220KB
-
Filesize
476KB
-
Filesize
472KB
-
Filesize
472KB
-
Filesize
8KB
-
Filesize
472KB