Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
98s -
max time network
61s -
platform
windows7_x64 -
resource
win7-20220901-en -
resource tags
arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system -
submitted
24/11/2022, 06:16
Behavioral task
behavioral1
Sample
b6d1c759a1024e59b0dc686289b57f76c05f4c4125b55b57ac1cb731380b28d3.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b6d1c759a1024e59b0dc686289b57f76c05f4c4125b55b57ac1cb731380b28d3.exe
Resource
win10v2004-20220812-en
General
-
Target
b6d1c759a1024e59b0dc686289b57f76c05f4c4125b55b57ac1cb731380b28d3.exe
-
Size
232KB
-
MD5
41a659b7aae73cd51be56612e31cea34
-
SHA1
2602d13b88580f76aed9133bed582efd883049a3
-
SHA256
b6d1c759a1024e59b0dc686289b57f76c05f4c4125b55b57ac1cb731380b28d3
-
SHA512
4e0ae2a024e2152de0432d6eccadb2a0d0cf4b4f139f3647f1b6f7c13a3ae4fbe2e6d29c8639cde6bfb96979d1d6da546836383ea12ef63f3d02f435744dc311
-
SSDEEP
6144:19kW9pME2UB24kOWSOQPnXZKfRuNPi7KWELO:npSEpB24kOLPXk5udiOWEL
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/1720-57-0x0000000000400000-0x000000000049E000-memory.dmp upx behavioral1/memory/1720-58-0x0000000000400000-0x000000000049E000-memory.dmp upx behavioral1/memory/1720-59-0x0000000000400000-0x000000000049E000-memory.dmp upx -
Loads dropped DLL 1 IoCs
pid Process 1720 b6d1c759a1024e59b0dc686289b57f76c05f4c4125b55b57ac1cb731380b28d3.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
387KB
MD53d5b3a91f8a9f212066545097d4992b4
SHA1af65d21c2269da258ed7ced7e0d5dc7307b28b0e
SHA2568fce90b43afb03eb26acde7cccb2f8defec6a6eff4bd6c401883c7f78642da4c
SHA512a3148aedd80a34886333ae9af6b0aaac2302b2696f44eb2528a43e737b972ee686a6ba4e97bb3a1ffaaba039e61b7395ef053aa991a2dce397b1ab0d727f9888