Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
22s -
max time network
18s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system -
submitted
20/07/2023, 06:44
Static task
static1
Behavioral task
behavioral1
Sample
rc7.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
rc7.exe
Resource
win10-20230703-en
Behavioral task
behavioral3
Sample
rc7.exe
Resource
win10v2004-20230703-en
General
-
Target
rc7.exe
-
Size
6.0MB
-
MD5
0b3011204271ade2355bd7d5c5c56006
-
SHA1
d451fbd27693c53f94ed535d720d839daf2dd3ce
-
SHA256
3402fda0ee82df11f7ccea82f0319a037c44508b02743c802d2e33a7a8c0f906
-
SHA512
2bed34227613ff67f57ab1cdac7ae128a23761573a8c88c47ff20a09541cdecaad8b693a9d96065a04dfb0bf0ac2e558b97c9c515779162fb857c55badecde71
-
SSDEEP
98304:RJEtdFBmamaHl3Ne4i3gmtfXJOLhx9fZAzDJ4wzDgsRuGKCR2CTAsE48fjcrpEkR:RIFFeN/FJMIDJf/gsAGKCR2CTifY2kR
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 2500 rc7.exe -
resource yara_rule behavioral1/files/0x0006000000016d33-76.dat upx behavioral1/files/0x0006000000016d33-77.dat upx behavioral1/memory/2500-78-0x000007FEF6560000-0x000007FEF69CE000-memory.dmp upx -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 2616 wrote to memory of 2500 2616 rc7.exe 28 PID 2616 wrote to memory of 2500 2616 rc7.exe 28 PID 2616 wrote to memory of 2500 2616 rc7.exe 28
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.4MB
MD5178a0f45fde7db40c238f1340a0c0ec0
SHA1dcd2d3d14e06da3e8d7dc91a69b5fd785768b5fe
SHA2569fcb5ad15bd33dd72122a171a5d950e8e47ceda09372f25df828010cde24b8ed
SHA5124b790046787e57b9414a796838a026b1530f497a75c8e62d62b56f8c16a0cbedbefad3d4be957bc18379f64374d8d3bf62d3c64b53476c7c5005a7355acd2cee
-
Filesize
1.4MB
MD5178a0f45fde7db40c238f1340a0c0ec0
SHA1dcd2d3d14e06da3e8d7dc91a69b5fd785768b5fe
SHA2569fcb5ad15bd33dd72122a171a5d950e8e47ceda09372f25df828010cde24b8ed
SHA5124b790046787e57b9414a796838a026b1530f497a75c8e62d62b56f8c16a0cbedbefad3d4be957bc18379f64374d8d3bf62d3c64b53476c7c5005a7355acd2cee