Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
-
submitted
17/07/2023, 16:12
General
-
Target
95dba8b3f696c2_JC.exe
-
Size
428KB
-
MD5
95dba8b3f696c236941bdcf91849e20f
-
SHA1
f32c97ab8c3e9a94c07d22223a6a4c6d83f74a61
-
SHA256
06a648198ac164b7decec427a6adeea5dddb5adc084458bceb8eb018ae9ff4f5
-
SHA512
4dc8e2b2f984ffd22239703dcfdf12bdbad88088c2f3834b01812f889460b0342bf4ced9fa86afe3174c707f509d225a9706475af2902673292e38be004b1e91
-
SSDEEP
12288:Z594+AcL4tBekiuKzEr0ygLRvlZU9m9uogS2FNl:BL4tBekiuVrDAllSs9uoy
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\95dba8b3f696c2_JC.exe"C:\Users\Admin\AppData\Local\Temp\95dba8b3f696c2_JC.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\B2FA.tmp"C:\Users\Admin\AppData\Local\Temp\B2FA.tmp" --helpC:\Users\Admin\AppData\Local\Temp\95dba8b3f696c2_JC.exe 80D3F3FB2D8C8D6D236B32A663F8E8CA64FE78F3504BF6FDC1BC08806EA6CA399C7B5F6EB1C763CA72C13ACC77B11C6E679224443E2B656A3D39B8E558D943362⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
428KB
MD52cad25b0fc55a4f08a3ff9e6f74fdc06
SHA1bef6a21e6afc6d68b900f319c2f9147d0e9de34e
SHA2568948a53c36ada62cbe2902c56720ef86c90403d735d59af742283a18945597d0
SHA51285b3c9fe6f3a325e2dfe71321d2dcb8d1755acd7aaeba8cee39501bb3447388637a285e9e9024288298bbced5ef5f3cd35875a7b75520c91e52e1296260c6ab8
-
Filesize
428KB
MD52cad25b0fc55a4f08a3ff9e6f74fdc06
SHA1bef6a21e6afc6d68b900f319c2f9147d0e9de34e
SHA2568948a53c36ada62cbe2902c56720ef86c90403d735d59af742283a18945597d0
SHA51285b3c9fe6f3a325e2dfe71321d2dcb8d1755acd7aaeba8cee39501bb3447388637a285e9e9024288298bbced5ef5f3cd35875a7b75520c91e52e1296260c6ab8