Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
145s -
max time network
186s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
-
submitted
25/11/2022, 23:53
General
-
Target
7353ed912300bb34a57e2945ab7a9a2443eaaf30dc1eea206bcf790fb26c9def.exe
-
Size
1.0MB
-
MD5
9974f75ba48bfdf67bbe35eed3b8ef6d
-
SHA1
9b20be632f3750185f2b033976c6ca6158883d98
-
SHA256
7353ed912300bb34a57e2945ab7a9a2443eaaf30dc1eea206bcf790fb26c9def
-
SHA512
29e498ba0a90aff91bc9421188095d0e8d7049a3b820094fff1a91754703da094ea5d6eec0a480745d04d6362d622bdf681edf6cc2605cf0b4654b6d549cc159
-
SSDEEP
24576:V4nOnCnA3aneKjyOxnHmhFneVnKint5owxA44UutnmnxDZoDnCn+nKn4nWcwxACE:ztKQLDn7k8SRLw
Malware Config
Signatures
-
Checks for common network interception software 1 TTPs
Looks in the registry for tools like Wireshark or Fiddler commonly used to analyze network activity.
-
Enumerates VirtualBox registry keys 2 TTPs 1 IoCs
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\7353ed912300bb34a57e2945ab7a9a2443eaaf30dc1eea206bcf790fb26c9def.exe"C:\Users\Admin\AppData\Local\Temp\7353ed912300bb34a57e2945ab7a9a2443eaaf30dc1eea206bcf790fb26c9def.exe"1⤵
- Enumerates VirtualBox registry keys
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.0MB
-
Filesize
1.0MB
-
Filesize
1.0MB
-
Filesize
1.0MB
-
Filesize
1.0MB
-
Filesize
1.0MB
-
Filesize
1.0MB
-
Filesize
1.0MB
-
Filesize
1.0MB
-
Filesize
8KB
-
Filesize
540KB
-
Filesize
1.0MB