Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    47s
  • max time network
    53s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    01/12/2022, 02:19

General

  • Target

    81d3258c0210844668ec7482249868920b05e2f97ed93eed44f64e115933b34c.exe

  • Size

    1.9MB

  • MD5

    38ed1482a93e877aa73059ae4d0fa8c4

  • SHA1

    c38f9632058d1a71a1679191406feb105553aa1a

  • SHA256

    81d3258c0210844668ec7482249868920b05e2f97ed93eed44f64e115933b34c

  • SHA512

    55466f9b1ed75371c4855ff286e59a1e82f01a3cb45b21470ef229cb521c1768aadfee7aad4cbabfda0ca35df5c19bd035b85bf51383579b4aa69a585d6cc6b4

  • SSDEEP

    49152:4xIjr6wPSFG2a0bDgfRFqT9EPvLI2ShrNDujwA:4qjr3S023Dg7qT+PBShBDQwA

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\81d3258c0210844668ec7482249868920b05e2f97ed93eed44f64e115933b34c.exe
    "C:\Users\Admin\AppData\Local\Temp\81d3258c0210844668ec7482249868920b05e2f97ed93eed44f64e115933b34c.exe"
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of SetWindowsHookEx
    PID:1364

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1364-54-0x0000000075091000-0x0000000075093000-memory.dmp

    Filesize

    8KB

  • memory/1364-55-0x000000007EF50000-0x000000007EFAC000-memory.dmp

    Filesize

    368KB

  • memory/1364-56-0x000000007EF50000-0x000000007EFAC000-memory.dmp

    Filesize

    368KB

  • memory/1364-57-0x000000007EF50000-0x000000007EFAC000-memory.dmp

    Filesize

    368KB

  • memory/1364-58-0x000000007EF50000-0x000000007EFAC000-memory.dmp

    Filesize

    368KB

  • memory/1364-59-0x000000007EF50000-0x000000007EFAC000-memory.dmp

    Filesize

    368KB

  • memory/1364-60-0x000000007EF50000-0x000000007EFAC000-memory.dmp

    Filesize

    368KB

  • memory/1364-61-0x000000007EF50000-0x000000007EFAC000-memory.dmp

    Filesize

    368KB

  • memory/1364-62-0x000000007EF50000-0x000000007EFAC000-memory.dmp

    Filesize

    368KB

  • memory/1364-63-0x0000000000537000-0x000000000053A200-memory.dmp

    Filesize

    12KB

  • memory/1364-64-0x0000000000537000-0x000000000053A200-memory.dmp

    Filesize

    12KB

  • memory/1364-65-0x0000000000537000-0x000000000053A200-memory.dmp

    Filesize

    12KB

  • memory/1364-66-0x0000000000537000-0x000000000053A200-memory.dmp

    Filesize

    12KB

  • memory/1364-67-0x0000000000537000-0x000000000053A200-memory.dmp

    Filesize

    12KB

  • memory/1364-68-0x0000000000537000-0x000000000053A200-memory.dmp

    Filesize

    12KB

  • memory/1364-69-0x0000000000537000-0x000000000053A200-memory.dmp

    Filesize

    12KB

  • memory/1364-70-0x0000000000537000-0x000000000053A200-memory.dmp

    Filesize

    12KB

  • memory/1364-71-0x0000000000537000-0x000000000053A200-memory.dmp

    Filesize

    12KB

  • memory/1364-72-0x0000000000537000-0x000000000053A200-memory.dmp

    Filesize

    12KB

  • memory/1364-73-0x0000000000537000-0x000000000053A200-memory.dmp

    Filesize

    12KB

  • memory/1364-74-0x0000000000537000-0x000000000053A200-memory.dmp

    Filesize

    12KB

  • memory/1364-75-0x0000000000537000-0x000000000053A200-memory.dmp

    Filesize

    12KB

  • memory/1364-76-0x0000000000537000-0x000000000053A200-memory.dmp

    Filesize

    12KB

  • memory/1364-78-0x0000000000537000-0x000000000053A200-memory.dmp

    Filesize

    12KB

  • memory/1364-77-0x0000000000537000-0x000000000053A200-memory.dmp

    Filesize

    12KB

  • memory/1364-79-0x0000000000537000-0x000000000053A200-memory.dmp

    Filesize

    12KB

  • memory/1364-80-0x0000000000537000-0x000000000053A200-memory.dmp

    Filesize

    12KB

  • memory/1364-81-0x0000000000537000-0x000000000053A200-memory.dmp

    Filesize

    12KB

  • memory/1364-82-0x0000000000537000-0x000000000053A200-memory.dmp

    Filesize

    12KB

  • memory/1364-83-0x0000000000537000-0x000000000053A200-memory.dmp

    Filesize

    12KB

  • memory/1364-84-0x0000000000537000-0x000000000053A200-memory.dmp

    Filesize

    12KB

  • memory/1364-85-0x0000000000537000-0x000000000053A200-memory.dmp

    Filesize

    12KB

  • memory/1364-86-0x0000000000400000-0x0000000000BDE000-memory.dmp

    Filesize

    7.9MB

  • memory/1364-87-0x000000007EF50000-0x000000007EFAC000-memory.dmp

    Filesize

    368KB

  • memory/1364-88-0x0000000000400000-0x0000000000BDE000-memory.dmp

    Filesize

    7.9MB

  • memory/1364-89-0x0000000000400000-0x0000000000BDE000-memory.dmp

    Filesize

    7.9MB

  • memory/1364-90-0x000000007EF50000-0x000000007EFAC000-memory.dmp

    Filesize

    368KB