Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
163s -
max time network
91s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
-
submitted
02/12/2022, 17:49
General
-
Target
a277df2b13fa15a8415dd65312f93046f1228f22a7deff029d3bbd3e507b0b58.exe
-
Size
1.0MB
-
MD5
b378f630f81b7a91eb01f6d12ce75b3a
-
SHA1
37504951ff02f243ca60d47e054fecfe30349d90
-
SHA256
a277df2b13fa15a8415dd65312f93046f1228f22a7deff029d3bbd3e507b0b58
-
SHA512
0035cecaead0f7a42684a85f047b7cc85777bcec780dbe93f5a9c5b53cfc460a385bc9e7da7c1e3aa775fd1dd75482418053b3ca0f2f75bb1b5762e789a3b1fc
-
SSDEEP
24576:h4eHzYfE2GmW7uPyIOb8FEZ/e8dw8nhr2+nFHTEd:NUfE2utIi2EZW8O8c+nFHTEd
Score
6/10
Malware Config
Signatures
-
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Modifies Internet Explorer settings 1 TTPs 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 10 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\a277df2b13fa15a8415dd65312f93046f1228f22a7deff029d3bbd3e507b0b58.exe"C:\Users\Admin\AppData\Local\Temp\a277df2b13fa15a8415dd65312f93046f1228f22a7deff029d3bbd3e507b0b58.exe"1⤵
- Writes to the Master Boot Record (MBR)
- Modifies Internet Explorer settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.7MB
-
Filesize
8KB
-
Filesize
268KB
-
Filesize
1.7MB
-
Filesize
268KB