Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
30s -
max time network
33s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system -
submitted
13/03/2023, 18:37
Behavioral task
behavioral1
Sample
loadez.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
loadez.exe
Resource
win10v2004-20230220-en
General
-
Target
loadez.exe
-
Size
6.1MB
-
MD5
70eee3a963494c4319bb8e8bf95114c1
-
SHA1
ef8611500b582a7c1e97d897c76e1610626b5811
-
SHA256
89418a2820d95fe6be32e0083835f5a133e6af2634f71e0b9b2f7c90b126c264
-
SHA512
8eeca18d59abfbca4ff21e4b4aae01c9ec7c0c891e22b08b7ad209667f7895b283d5befd9ddf67e58b90eaef65ff577c14ac74e99541ac13bf2b1a1e744500b3
-
SSDEEP
98304:Vm8rswZh2uW5MI0md9g+Di2O7/Xuy/+7F+7cETACVk0rNk5Dn7:VmNwZEL2Vmd6+Di2c/f/+ScEjtpyDn
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 300 loadez.exe -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 1924 wrote to memory of 300 1924 loadez.exe 27 PID 1924 wrote to memory of 300 1924 loadez.exe 27 PID 1924 wrote to memory of 300 1924 loadez.exe 27
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4.3MB
MD5c80b5cb43e5fe7948c3562c1fff1254e
SHA1f73cb1fb9445c96ecd56b984a1822e502e71ab9d
SHA256058925e4bbfcb460a3c00ec824b8390583baef0c780a7c7ff01d43d9eec45f20
SHA512faa97a9d5d2a0bf78123f19f8657c24921b907268938c26f79e1df6d667f7bee564259a3a11022e8629996406cda9fa00434bb2b1de3e10b9bddc59708dbad81
-
Filesize
4.3MB
MD5c80b5cb43e5fe7948c3562c1fff1254e
SHA1f73cb1fb9445c96ecd56b984a1822e502e71ab9d
SHA256058925e4bbfcb460a3c00ec824b8390583baef0c780a7c7ff01d43d9eec45f20
SHA512faa97a9d5d2a0bf78123f19f8657c24921b907268938c26f79e1df6d667f7bee564259a3a11022e8629996406cda9fa00434bb2b1de3e10b9bddc59708dbad81