Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    28s
  • max time network
    33s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    24/04/2023, 05:30

General

  • Target

    blatantclicker.exe

  • Size

    930KB

  • MD5

    b6f8b023cfb132553b707d3137492421

  • SHA1

    0d4e93fdb9a1bbf6d871c6e69abbe6faea73a395

  • SHA256

    2a05a86b480a273181c5bf324bc6ec85ab5938ad1f5cf255e6ea986fa1313fb3

  • SHA512

    fb9a737c41984a4fcd044f652a843809cddecfb8ae6c37a60787a8448baed63c2214fc9acd6ad51ca50a4732b56e3a1338d9e131d2c981ff759e4ee9c5ed02b2

  • SSDEEP

    24576:wxyYqJ2Lq8ki+TqP0sh5Th9Fh3N5Qk/WOxTGTNE3Mjqa6L8OpO6nAG/fEZ/PKhqM:nqaa8OpO6AIEhPGEDnVR

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\blatantclicker.exe
    "C:\Users\Admin\AppData\Local\Temp\blatantclicker.exe"
    1⤵
    • Loads dropped DLL
    PID:1096
  • C:\Windows\SysWOW64\DllHost.exe
    C:\Windows\SysWOW64\DllHost.exe /Processid:{06622D85-6856-4460-8DE1-A81921B41C4B}
    1⤵
      PID:1376

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Temp\32a4a32f-b10a-42fc-a699-939a32e55fe5\SiticoneDotNetRT64.dll

      Filesize

      142KB

      MD5

      9c43f77cb7cff27cb47ed67babe3eda5

      SHA1

      b0400cf68249369d21de86bd26bb84ccffd47c43

      SHA256

      f25b9288fe370dcfcb4823fb4e44ab88c7f5fce6e137d0dba389a3dba07d621e

      SHA512

      cde6fb6cf8db6f9746e69e6c10214e60b3646700d70b49668a2a792e309714dd2d4c5a5241977a833a95fcde8318abcc89eb9968a5039a0b75726bbfa27125a7

    • \Users\Admin\AppData\Local\Temp\32a4a32f-b10a-42fc-a699-939a32e55fe5\SiticoneDotNetRT64.dll

      Filesize

      142KB

      MD5

      9c43f77cb7cff27cb47ed67babe3eda5

      SHA1

      b0400cf68249369d21de86bd26bb84ccffd47c43

      SHA256

      f25b9288fe370dcfcb4823fb4e44ab88c7f5fce6e137d0dba389a3dba07d621e

      SHA512

      cde6fb6cf8db6f9746e69e6c10214e60b3646700d70b49668a2a792e309714dd2d4c5a5241977a833a95fcde8318abcc89eb9968a5039a0b75726bbfa27125a7

    • memory/1096-124-0x000000001C0C0000-0x000000001C264000-memory.dmp

      Filesize

      1.6MB

    • memory/1096-76-0x000000001C0C0000-0x000000001C264000-memory.dmp

      Filesize

      1.6MB

    • memory/1096-55-0x000000001AF00000-0x000000001AF80000-memory.dmp

      Filesize

      512KB

    • memory/1096-63-0x000007FEF6F90000-0x000007FEF70BC000-memory.dmp

      Filesize

      1.2MB

    • memory/1096-64-0x000000001C0C0000-0x000000001C264000-memory.dmp

      Filesize

      1.6MB

    • memory/1096-65-0x000000001C0C0000-0x000000001C264000-memory.dmp

      Filesize

      1.6MB

    • memory/1096-68-0x000000001C0C0000-0x000000001C264000-memory.dmp

      Filesize

      1.6MB

    • memory/1096-67-0x000007FEFB150000-0x000007FEFB177000-memory.dmp

      Filesize

      156KB

    • memory/1096-70-0x000000001C0C0000-0x000000001C264000-memory.dmp

      Filesize

      1.6MB

    • memory/1096-72-0x000000001C0C0000-0x000000001C264000-memory.dmp

      Filesize

      1.6MB

    • memory/1096-74-0x000000001C0C0000-0x000000001C264000-memory.dmp

      Filesize

      1.6MB

    • memory/1096-86-0x000000001C0C0000-0x000000001C264000-memory.dmp

      Filesize

      1.6MB

    • memory/1096-84-0x000000001C0C0000-0x000000001C264000-memory.dmp

      Filesize

      1.6MB

    • memory/1096-82-0x000000001C0C0000-0x000000001C264000-memory.dmp

      Filesize

      1.6MB

    • memory/1096-80-0x000000001C0C0000-0x000000001C264000-memory.dmp

      Filesize

      1.6MB

    • memory/1096-78-0x000000001C0C0000-0x000000001C264000-memory.dmp

      Filesize

      1.6MB

    • memory/1096-122-0x000000001C0C0000-0x000000001C264000-memory.dmp

      Filesize

      1.6MB

    • memory/1096-126-0x000000001C0C0000-0x000000001C264000-memory.dmp

      Filesize

      1.6MB

    • memory/1096-56-0x000000001C0C0000-0x000000001C268000-memory.dmp

      Filesize

      1.7MB

    • memory/1096-54-0x0000000000A70000-0x0000000000B5E000-memory.dmp

      Filesize

      952KB

    • memory/1096-114-0x000000001C0C0000-0x000000001C264000-memory.dmp

      Filesize

      1.6MB

    • memory/1096-118-0x000000001C0C0000-0x000000001C264000-memory.dmp

      Filesize

      1.6MB

    • memory/1096-116-0x000000001C0C0000-0x000000001C264000-memory.dmp

      Filesize

      1.6MB

    • memory/1096-120-0x000000001C0C0000-0x000000001C264000-memory.dmp

      Filesize

      1.6MB

    • memory/1096-112-0x000000001C0C0000-0x000000001C264000-memory.dmp

      Filesize

      1.6MB

    • memory/1096-110-0x000000001C0C0000-0x000000001C264000-memory.dmp

      Filesize

      1.6MB

    • memory/1096-108-0x000000001C0C0000-0x000000001C264000-memory.dmp

      Filesize

      1.6MB

    • memory/1096-106-0x000000001C0C0000-0x000000001C264000-memory.dmp

      Filesize

      1.6MB

    • memory/1096-104-0x000000001C0C0000-0x000000001C264000-memory.dmp

      Filesize

      1.6MB

    • memory/1096-102-0x000000001C0C0000-0x000000001C264000-memory.dmp

      Filesize

      1.6MB

    • memory/1096-100-0x000000001C0C0000-0x000000001C264000-memory.dmp

      Filesize

      1.6MB

    • memory/1096-98-0x000000001C0C0000-0x000000001C264000-memory.dmp

      Filesize

      1.6MB

    • memory/1096-96-0x000000001C0C0000-0x000000001C264000-memory.dmp

      Filesize

      1.6MB

    • memory/1096-94-0x000000001C0C0000-0x000000001C264000-memory.dmp

      Filesize

      1.6MB

    • memory/1096-92-0x000000001C0C0000-0x000000001C264000-memory.dmp

      Filesize

      1.6MB

    • memory/1096-90-0x000000001C0C0000-0x000000001C264000-memory.dmp

      Filesize

      1.6MB

    • memory/1096-88-0x000000001C0C0000-0x000000001C264000-memory.dmp

      Filesize

      1.6MB

    • memory/1096-1603-0x000000001AF00000-0x000000001AF80000-memory.dmp

      Filesize

      512KB

    • memory/1096-1754-0x000007FEFB150000-0x000007FEFB177000-memory.dmp

      Filesize

      156KB