Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
30s -
max time network
33s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system -
submitted
29/12/2022, 21:44
Behavioral task
behavioral1
Sample
setup.exe
Resource
win10-20220812-en
Behavioral task
behavioral2
Sample
setup.exe
Resource
win7-20221111-en
General
-
Target
setup.exe
-
Size
11.1MB
-
MD5
57b7e94de6ac64dfd63c7dce836fe73d
-
SHA1
06f62b7ac78e858123932aee6fe9986a4a5a6e8f
-
SHA256
f5c0ba21aedc485e001cc25b51e5b8ea5e682d4bb6bfd722e12b1d774832867f
-
SHA512
598646fadbbf037e226233439c4ed9a495a57a8078522a08df5e0694907ffaa3a94649a863afde374c42b83f18408aeee1fe33e005d2e8a5970034e71e984063
-
SSDEEP
196608:OdLaAX2gyJBd1obcnn1HXpeL2Vmd6+DWMTNfwZHYYAovCw/jLgMJIytDV93DBvng:6xdyJhoon13peL2Vmd6mWMBktCwoMJ/d
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 1716 setup.exe -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 1380 wrote to memory of 1716 1380 setup.exe 28 PID 1380 wrote to memory of 1716 1380 setup.exe 28 PID 1380 wrote to memory of 1716 1380 setup.exe 28
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4.2MB
MD5e9c0fbc99d19eeedad137557f4a0ab21
SHA18945e1811ceb4b26f21edcc7a36dcf2b1d34f0bf
SHA2565783c5c5a3ffce181691f19d27de376a03010d32e41360b72bcdbd28467cfcc5
SHA51274e1289683642ae2bc3cf780a07af1f27fed2011ef6cc67380f9c066c59d17a2fb2394a45a5c6cd75dad812a61093fdbd0f2108925f5c58fc6644c1c98be5c0b
-
Filesize
4.2MB
MD5e9c0fbc99d19eeedad137557f4a0ab21
SHA18945e1811ceb4b26f21edcc7a36dcf2b1d34f0bf
SHA2565783c5c5a3ffce181691f19d27de376a03010d32e41360b72bcdbd28467cfcc5
SHA51274e1289683642ae2bc3cf780a07af1f27fed2011ef6cc67380f9c066c59d17a2fb2394a45a5c6cd75dad812a61093fdbd0f2108925f5c58fc6644c1c98be5c0b