Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    80s
  • max time network
    171s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    29/11/2022, 12:26

General

  • Target

    65604c7de1a29d6e8a0d153e4c2f65c31679932f3a307d0aa63cb32e1087d501.exe

  • Size

    1.1MB

  • MD5

    4509f29a07e018bf6e7be725387a8a8f

  • SHA1

    36d68a8dbb8c9cde81056829244f05bac9cd4aea

  • SHA256

    65604c7de1a29d6e8a0d153e4c2f65c31679932f3a307d0aa63cb32e1087d501

  • SHA512

    a1c4bc26dda044e08e98fb4ff67d94c11e7d62a3160a650909b391d507acb8764848cf17ed89336ada19a60f0311dc86f6242b13823d1593130ee1a2e2c4f8c8

  • SSDEEP

    24576:DZ5YBgaEX4lQx+Z06etHa1OucYk/7C1dZTj8lSvFFRT:N5R14lQxi0tHa1Oucx7IdZTjbVT

Score
8/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Modifies system certificate store 2 TTPs 7 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\65604c7de1a29d6e8a0d153e4c2f65c31679932f3a307d0aa63cb32e1087d501.exe
    "C:\Users\Admin\AppData\Local\Temp\65604c7de1a29d6e8a0d153e4c2f65c31679932f3a307d0aa63cb32e1087d501.exe"
    1⤵
    • Modifies system certificate store
    PID:1192

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1192-54-0x0000000074FD1000-0x0000000074FD3000-memory.dmp

    Filesize

    8KB

  • memory/1192-55-0x0000000000400000-0x00000000005CE000-memory.dmp

    Filesize

    1.8MB

  • memory/1192-56-0x0000000000400000-0x00000000005CE000-memory.dmp

    Filesize

    1.8MB