Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    185s
  • max time network
    203s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    01/12/2022, 19:01

General

  • Target

    fxukorulwt.exe

  • Size

    752KB

  • MD5

    a9f031e1634aafca1f239eb4e1ba07ca

  • SHA1

    864bfaa408b97b2db491a1ca25921d29bd261a03

  • SHA256

    f3ea7f161fb1240713196409ec2390702731cbf3615e5b2b5b120b7189713087

  • SHA512

    76b6d2a1e274f083bebebbf17bac509885fcf61910416350f4123944b462964e20e782e23e0c60b9af5f6e071c8ab0c637bcd983b1a6158bd893f6cdf7058262

  • SSDEEP

    12288:02ezuSE0nGmeIWgZjSu/kUJuZpkBlqO8Z8HcYLWBSdIhcs4I+Gcfcu6ACw:czumGXIXB3JuSltSAcqocDrGcfqY

Score
1/10

Malware Config

Signatures

  • Modifies system certificate store 2 TTPs 6 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\fxukorulwt.exe
    "C:\Users\Admin\AppData\Local\Temp\fxukorulwt.exe"
    1⤵
    • Modifies system certificate store
    PID:960

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/960-54-0x0000000140000000-0x00000001400DA000-memory.dmp

    Filesize

    872KB

  • memory/960-55-0x000007FEFB971000-0x000007FEFB973000-memory.dmp

    Filesize

    8KB