Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
71s -
max time network
75s -
platform
windows7_x64 -
resource
win7-20230703-en -
resource tags
-
submitted
11/07/2023, 06:53
General
-
Target
e4365b048b21caexeexeexeex.exe
-
Size
428KB
-
MD5
e4365b048b21ca1cf9c524685b1bf16a
-
SHA1
f23707fbafd285488d6d21b0ddc4ceb6015d50bd
-
SHA256
7c497941f9f425c2369793153327b4eb6aabce1dd42c7005f052db6247e898e2
-
SHA512
fd715bde6131f597d854a6d84b457ea8cea1a5ae2e2888e16ed7f3502b62d0402b26abb982e992913e6951826a760370d3bcc98732b64c82a1086810efc94fb5
-
SSDEEP
12288:Z594+AcL4tBekiuKzErAFc4LaJuk4TEwyXWFVPl:BL4tBekiuVrAFxLKuk0nnFVP
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\e4365b048b21caexeexeexeex.exe"C:\Users\Admin\AppData\Local\Temp\e4365b048b21caexeexeexeex.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\2EFD.tmp"C:\Users\Admin\AppData\Local\Temp\2EFD.tmp" --helpC:\Users\Admin\AppData\Local\Temp\e4365b048b21caexeexeexeex.exe 8589EDCEA58886E9C7703FF739224EB88F17E7E917725D24A219ED4224328C89AA5B63D027472C70D4A81D7390D6284EF6C2FCCA3973E2CC70C81D05217E98DC2⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
428KB
MD5c4e9a7e7a9f5a422a5bd840da34ca9ca
SHA16d8b56d63606cf95c521d4f98158ec8ac6c054c4
SHA2564c682c878172a524468b718b1bd4082994b797671f0c99087920338a7ba624bf
SHA512324edd1f5d3990253dd675994a89980521acbf4f6b0c555ada61b5a46d67cee3fd04983377fc75b1c0aed2c07a074bb3a3017389e78dfebdb3b7b3afa98dba2c
-
Filesize
428KB
MD5c4e9a7e7a9f5a422a5bd840da34ca9ca
SHA16d8b56d63606cf95c521d4f98158ec8ac6c054c4
SHA2564c682c878172a524468b718b1bd4082994b797671f0c99087920338a7ba624bf
SHA512324edd1f5d3990253dd675994a89980521acbf4f6b0c555ada61b5a46d67cee3fd04983377fc75b1c0aed2c07a074bb3a3017389e78dfebdb3b7b3afa98dba2c