Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

9aff68a912...15.exe

windows7-x64

7

9aff68a912...15.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    42s
  • max time network
    46s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    03/12/2022, 21:37

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    9aff68a91244a12d1f5f4067763001896e2921b6abfabfb1e0f3d8720eac5e15.exe

  • Size

    1.6MB

  • MD5

    04961b0a9974c5a17ea3fba9bd5543dd

  • SHA1

    d91b674a1a25bdecffeccc0c70f463864d8ecdb8

  • SHA256

    9aff68a91244a12d1f5f4067763001896e2921b6abfabfb1e0f3d8720eac5e15

  • SHA512

    57ada6bc0e7574779bfe363ba1f8cc17b392486a4b28e316d7067c59574fd615ec91b6812898c8e2aa39534488c93bd7257c84b3f01569d425ed5745c08f69eb

  • SSDEEP

    24576:arY2yCgkUfUufHUKdBe1/GIY59yV1JDajCzMZ+u33vB0g4pSVhXdP/Une4x0qpk1:EUxLLBsAOV10j5AuPB0goSF/Gxut2rGV

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 2 IoCs
  • Drops file in System32 directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\9aff68a91244a12d1f5f4067763001896e2921b6abfabfb1e0f3d8720eac5e15.exe
    "C:\Users\Admin\AppData\Local\Temp\9aff68a91244a12d1f5f4067763001896e2921b6abfabfb1e0f3d8720eac5e15.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in System32 directory
    PID:1904

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\GLC8DDF.tmp
    Filesize

    161KB

    MD5

    d745fbfc0af9e589fc3e21f8be013702

    SHA1

    36dc60e5741e3d6c4deb4b1e2aba97846698148a

    SHA256

    4b1a2c11d745ee09d28ddf1a78cdfbfcae6fe9f9cb0816aef47475b377c8542f

    SHA512

    01570efabf0acc7fd8808ea5219a76ed9f8fa7e2c68cf450793c4fa91e38adc5931a50f263fdd675d297a0e97b1e31bb3ef31a69937a6a7997d9dca66a7532d7

    Download Submit

  • \Users\Admin\AppData\Local\Temp\GLK915A.tmp
    Filesize

    33KB

    MD5

    07631941f67818659e0e97932224886f

    SHA1

    a5fa37d427480b569fa858ec66cca2a85d35a40d

    SHA256

    d73170ea2688da5f6f37d4ca70b72dbc061abd47615269968563b5fcbd74dd9c

    SHA512

    fbd217add3e1897281de80e2bd935b1251812744264fc5c9a77e88615c18d97a3c01d4f75165d80f3a067369b9e679500e836ec39fafc11d5a40b0054e83d510

    Download Submit

  • memory/1904-54-0x0000000076871000-0x0000000076873000-memory.dmp

    Filesize

    8KB

    Download