Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    54s
  • max time network
    45s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    02/05/2023, 09:28

General

  • Target

    57d15a6f866ced075bc300b1e2c37165.exe

  • Size

    255KB

  • MD5

    57d15a6f866ced075bc300b1e2c37165

  • SHA1

    145479399c23aabcf01caaa3c9f6356746288e25

  • SHA256

    c084e334c31cf636666e63fbff0d155fcb10cb813f21e5c262eb21530c4c1755

  • SHA512

    28d45792e0f5cf819fc2a362167c2f1ab83cf5256a857f38d904d5ec26095b5c7718d2c8b913296aa809a03ee2a7b43d5e372defb2c9bf67feb3e97a0794e0a9

  • SSDEEP

    1536:VuSmgtPAEzzeUkTVs8QbNFsCqThVaNj0XbK4ka87:VuS9AEzzeUkhs9FshThp07

Score
6/10

Malware Config

Signatures

  • Legitimate hosting services abused for malware hosting/C2 1 TTPs
  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\57d15a6f866ced075bc300b1e2c37165.exe
    "C:\Users\Admin\AppData\Local\Temp\57d15a6f866ced075bc300b1e2c37165.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:1528

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1528-54-0x0000000000F80000-0x0000000000FC4000-memory.dmp

    Filesize

    272KB

  • memory/1528-55-0x000000001AD10000-0x000000001AD90000-memory.dmp

    Filesize

    512KB

  • memory/1528-56-0x000000001C5F0000-0x000000001C77A000-memory.dmp

    Filesize

    1.5MB

  • memory/1528-57-0x000000001B270000-0x000000001B31A000-memory.dmp

    Filesize

    680KB

  • memory/1528-58-0x000000001B720000-0x000000001B7B2000-memory.dmp

    Filesize

    584KB

  • memory/1528-60-0x000000001C0F0000-0x000000001C1A2000-memory.dmp

    Filesize

    712KB

  • memory/1528-61-0x000000001AD10000-0x000000001AD90000-memory.dmp

    Filesize

    512KB

  • memory/1528-62-0x000000001C780000-0x000000001C876000-memory.dmp

    Filesize

    984KB

  • memory/1528-63-0x000000001C780000-0x000000001C870000-memory.dmp

    Filesize

    960KB

  • memory/1528-64-0x000000001C780000-0x000000001C870000-memory.dmp

    Filesize

    960KB

  • memory/1528-66-0x000000001C780000-0x000000001C870000-memory.dmp

    Filesize

    960KB

  • memory/1528-68-0x000000001C780000-0x000000001C870000-memory.dmp

    Filesize

    960KB

  • memory/1528-70-0x000000001C780000-0x000000001C870000-memory.dmp

    Filesize

    960KB

  • memory/1528-72-0x000000001C780000-0x000000001C870000-memory.dmp

    Filesize

    960KB

  • memory/1528-74-0x000000001C780000-0x000000001C870000-memory.dmp

    Filesize

    960KB

  • memory/1528-76-0x000000001C780000-0x000000001C870000-memory.dmp

    Filesize

    960KB

  • memory/1528-78-0x000000001C780000-0x000000001C870000-memory.dmp

    Filesize

    960KB

  • memory/1528-80-0x000000001C780000-0x000000001C870000-memory.dmp

    Filesize

    960KB

  • memory/1528-82-0x000000001C780000-0x000000001C870000-memory.dmp

    Filesize

    960KB

  • memory/1528-84-0x000000001C780000-0x000000001C870000-memory.dmp

    Filesize

    960KB

  • memory/1528-86-0x000000001C780000-0x000000001C870000-memory.dmp

    Filesize

    960KB

  • memory/1528-88-0x000000001C780000-0x000000001C870000-memory.dmp

    Filesize

    960KB

  • memory/1528-90-0x000000001C780000-0x000000001C870000-memory.dmp

    Filesize

    960KB

  • memory/1528-92-0x000000001C780000-0x000000001C870000-memory.dmp

    Filesize

    960KB

  • memory/1528-94-0x000000001C780000-0x000000001C870000-memory.dmp

    Filesize

    960KB

  • memory/1528-96-0x000000001C780000-0x000000001C870000-memory.dmp

    Filesize

    960KB

  • memory/1528-98-0x000000001C780000-0x000000001C870000-memory.dmp

    Filesize

    960KB

  • memory/1528-100-0x000000001C780000-0x000000001C870000-memory.dmp

    Filesize

    960KB

  • memory/1528-102-0x000000001C780000-0x000000001C870000-memory.dmp

    Filesize

    960KB

  • memory/1528-104-0x000000001C780000-0x000000001C870000-memory.dmp

    Filesize

    960KB

  • memory/1528-106-0x000000001C780000-0x000000001C870000-memory.dmp

    Filesize

    960KB

  • memory/1528-108-0x000000001C780000-0x000000001C870000-memory.dmp

    Filesize

    960KB

  • memory/1528-110-0x000000001C780000-0x000000001C870000-memory.dmp

    Filesize

    960KB

  • memory/1528-112-0x000000001C780000-0x000000001C870000-memory.dmp

    Filesize

    960KB

  • memory/1528-114-0x000000001C780000-0x000000001C870000-memory.dmp

    Filesize

    960KB

  • memory/1528-116-0x000000001C780000-0x000000001C870000-memory.dmp

    Filesize

    960KB

  • memory/1528-118-0x000000001C780000-0x000000001C870000-memory.dmp

    Filesize

    960KB

  • memory/1528-120-0x000000001C780000-0x000000001C870000-memory.dmp

    Filesize

    960KB

  • memory/1528-122-0x000000001C780000-0x000000001C870000-memory.dmp

    Filesize

    960KB

  • memory/1528-124-0x000000001C780000-0x000000001C870000-memory.dmp

    Filesize

    960KB

  • memory/1528-126-0x000000001C780000-0x000000001C870000-memory.dmp

    Filesize

    960KB

  • memory/1528-2381-0x000000001A750000-0x000000001A7A6000-memory.dmp

    Filesize

    344KB

  • memory/1528-2382-0x0000000000C10000-0x0000000000C5C000-memory.dmp

    Filesize

    304KB

  • memory/1528-2383-0x000000001AD10000-0x000000001AD90000-memory.dmp

    Filesize

    512KB

  • memory/1528-2384-0x000000001AD10000-0x000000001AD90000-memory.dmp

    Filesize

    512KB

  • memory/1528-2385-0x000000001AD10000-0x000000001AD90000-memory.dmp

    Filesize

    512KB

  • memory/1528-2386-0x000000001AD10000-0x000000001AD90000-memory.dmp

    Filesize

    512KB