Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Resubmissions
18/10/2023, 23:41
231018-3pl7lsce5w 429/08/2023, 22:29
230829-2eq75sgd88 421/05/2023, 14:26
230521-rr5aesdc3y 4Analysis
-
max time kernel
129s -
max time network
30s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system -
submitted
21/05/2023, 14:26
Static task
static1
Behavioral task
behavioral1
Sample
SnapDownloader-1.14.5.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
SnapDownloader-1.14.5.exe
Resource
win10v2004-20230220-en
General
-
Target
SnapDownloader-1.14.5.exe
-
Size
87.9MB
-
MD5
27dc2258937a83b1f987862589d9c095
-
SHA1
214e029bb7120b66aced01750e643988229df94b
-
SHA256
d1a80cdb1f5def2d927e86b9fab49cc5824cdfcf354beedafea6995286bb585b
-
SHA512
a57974dd564ad2c882b4689ba2cd4b67488d41f7a66ec0844cae0ede20382cb94c7a930cec4a549dc661e1a6c3e0a495bd18a2cbc91949e599e3dd5ee4486b8a
-
SSDEEP
1572864:GR8Ws62HSZ8Hox7v707uXIJF1rmq66B/hr3ePX9bC99YN+QCtr5uZ6:GR8Wf2Qso57VXILZB1V3ePty9TZh
Malware Config
Signatures
-
Loads dropped DLL 3 IoCs
pid Process 1880 SnapDownloader-1.14.5.exe 1880 SnapDownloader-1.14.5.exe 1880 SnapDownloader-1.14.5.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1880 SnapDownloader-1.14.5.exe
Processes
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
100KB
MD5c6a6e03f77c313b267498515488c5740
SHA13d49fc2784b9450962ed6b82b46e9c3c957d7c15
SHA256b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
SHA5129870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
-
Filesize
100KB
MD5c6a6e03f77c313b267498515488c5740
SHA13d49fc2784b9450962ed6b82b46e9c3c957d7c15
SHA256b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
SHA5129870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
-
Filesize
12KB
MD50d7ad4f45dc6f5aa87f606d0331c6901
SHA148df0911f0484cbe2a8cdd5362140b63c41ee457
SHA2563eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
SHA512c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
-
Filesize
14KB
MD5adb29e6b186daa765dc750128649b63d
SHA1160cbdc4cb0ac2c142d361df138c537aa7e708c9
SHA2562f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
SHA512b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada