Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

b2c01d7f1d...84.exe

windows7-x64

7

b2c01d7f1d...84.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    45s
  • max time network
    50s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    01/12/2022, 19:15

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    b2c01d7f1dc357a98fe90d1053e1c4dbcbb2d77f269195199ee12b40aa508a84.exe

  • Size

    57KB

  • MD5

    689c2fb44aa547bec25e07ef67daf2b2

  • SHA1

    2698929cbf7eb3113bc72fbdb84f785e8e6ad454

  • SHA256

    b2c01d7f1dc357a98fe90d1053e1c4dbcbb2d77f269195199ee12b40aa508a84

  • SHA512

    5f58f1248b16e7fba4920e99732006c3ec5d74d26dfb2c01f68f555bb748f2f1f0c5865868f6342cdf00d2ce09379e5790ed647ab4766a9cb5a4766c1760e0a1

  • SSDEEP

    768:KoG034WWuolP0ftknr/ef0mx9lzA1xRmxWvhbnRC:KE3ZolPAtbfHyUUvhbR

Score
7/10

Malware Config

Signatures

  • Checks BIOS information in registry 2 TTPs 1 IoCs

    BIOS information is often read in order to detect sandboxing environments.

  • Suspicious behavior: EnumeratesProcesses 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b2c01d7f1dc357a98fe90d1053e1c4dbcbb2d77f269195199ee12b40aa508a84.exe
    "C:\Users\Admin\AppData\Local\Temp\b2c01d7f1dc357a98fe90d1053e1c4dbcbb2d77f269195199ee12b40aa508a84.exe"
    1⤵
    • Checks BIOS information in registry
    • Suspicious behavior: EnumeratesProcesses
    PID:1368

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1368-54-0x0000000074E41000-0x0000000074E43000-memory.dmp

    Filesize

    8KB

    Download

  • memory/1368-55-0x0000000000400000-0x0000000000451000-memory.dmp

    Filesize

    324KB

    Download