Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
43s -
max time network
48s -
platform
windows7_x64 -
resource
win7-20220901-en -
resource tags
arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system -
submitted
03/12/2022, 00:10
Static task
static1
Behavioral task
behavioral1
Sample
67fbbe7470d5c4e49965166e2d683b88db5f9614fca38534ef6f181fe8168f01.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
67fbbe7470d5c4e49965166e2d683b88db5f9614fca38534ef6f181fe8168f01.exe
Resource
win10v2004-20221111-en
General
-
Target
67fbbe7470d5c4e49965166e2d683b88db5f9614fca38534ef6f181fe8168f01.exe
-
Size
63KB
-
MD5
6ec13e0720e797abf0f59f25abc1746c
-
SHA1
49b33fa79c39d5a78d05938e4f7251ac57c48ca6
-
SHA256
67fbbe7470d5c4e49965166e2d683b88db5f9614fca38534ef6f181fe8168f01
-
SHA512
e5f5da09e86146e6621a45caa0cc07cef034ff7852fa6ab8ffb29b1d147d49e85b832db8bac9c7ed0b7c52ca5fdb0904eec21e7be2c43a7d6c321bf3105204a6
-
SSDEEP
1536:x5a55rXcdVoy0M50cAnhX4M21mbTYxbwLKBecws9Q2:x5a55X8iEEnhX4MwxbwgeQ
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
pid Process 1284 System64.exe -
Drops file in System32 directory 2 IoCs
description ioc Process File created C:\Windows\SysWOW64\System64.exe 67fbbe7470d5c4e49965166e2d683b88db5f9614fca38534ef6f181fe8168f01.exe File opened for modification C:\Windows\SysWOW64\System64.exe 67fbbe7470d5c4e49965166e2d683b88db5f9614fca38534ef6f181fe8168f01.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\67fbbe7470d5c4e49965166e2d683b88db5f9614fca38534ef6f181fe8168f01.exe"C:\Users\Admin\AppData\Local\Temp\67fbbe7470d5c4e49965166e2d683b88db5f9614fca38534ef6f181fe8168f01.exe"1⤵
- Drops file in System32 directory
PID:1716
-
C:\Windows\SysWOW64\System64.exeC:\Windows\SysWOW64\System64.exe1⤵
- Executes dropped EXE
PID:1284
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
63KB
MD56ec13e0720e797abf0f59f25abc1746c
SHA149b33fa79c39d5a78d05938e4f7251ac57c48ca6
SHA25667fbbe7470d5c4e49965166e2d683b88db5f9614fca38534ef6f181fe8168f01
SHA512e5f5da09e86146e6621a45caa0cc07cef034ff7852fa6ab8ffb29b1d147d49e85b832db8bac9c7ed0b7c52ca5fdb0904eec21e7be2c43a7d6c321bf3105204a6