Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    141s
  • max time network
    140s
  • platform
    windows7_x64
  • resource
    win7-20230712-en
  • resource tags

    arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
  • submitted
    24/07/2023, 10:03

General

  • Target

    bdb8aa80f3ed7da44ae54a355823dd5f2dd9cb9d2645a8615612fa5e6b6066d1.exe

  • Size

    489KB

  • MD5

    62fae2308e1531f0f55da4808559427c

  • SHA1

    de2eda1453881a71ca973eb9e410152a41b3bb5b

  • SHA256

    bdb8aa80f3ed7da44ae54a355823dd5f2dd9cb9d2645a8615612fa5e6b6066d1

  • SHA512

    0437dd29c233c2597681cd6665a7fb8bf4a6ccb07e5b52d3f100d5e1ed217441e1bf191a46d500e2aab768b6c566381cdbb98d15f607df946361907bca0c171d

  • SSDEEP

    12288:aw7zJxo+Y8FNqhd5JrTcIlDFo4Y3SKBMQyD/E7Q:aw7rZ0hnoYT8Q

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 41 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Modifies Internet Explorer settings 1 TTPs 4 IoCs
  • Modifies system certificate store 2 TTPs 2 IoCs
  • Suspicious use of SetWindowsHookEx 5 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\bdb8aa80f3ed7da44ae54a355823dd5f2dd9cb9d2645a8615612fa5e6b6066d1.exe
    "C:\Users\Admin\AppData\Local\Temp\bdb8aa80f3ed7da44ae54a355823dd5f2dd9cb9d2645a8615612fa5e6b6066d1.exe"
    1⤵
    • Modifies Internet Explorer settings
    • Modifies system certificate store
    • Suspicious use of SetWindowsHookEx
    PID:2284

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AAHA5BN0\c_login_2[1].js

    Filesize

    208KB

    MD5

    8a50869763c7bb96e157b849e9469367

    SHA1

    9efc7fbc712d178f89680aa945acff01c184351f

    SHA256

    a540989b9f9bef8b4763c2b0052515e0897817b7013a05dee755c7517867217b

    SHA512

    b5e0c91c26b6c02f1fe9c43dad52b27041b4ff9a6f22ffb2d99a0a1ab63c733fbcd670699ecca8a3665ed6a18c2800243fea250eb3073e9a871d48b98f0349f0

  • memory/2284-82-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2284-72-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2284-57-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2284-60-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2284-62-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2284-64-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2284-68-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2284-70-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2284-74-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2284-78-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2284-80-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2284-84-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2284-88-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2284-90-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2284-94-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2284-98-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2284-96-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2284-92-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2284-86-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2284-54-0x0000000000400000-0x0000000000526000-memory.dmp

    Filesize

    1.1MB

  • memory/2284-56-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2284-66-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2284-76-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2284-58-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2284-99-0x0000000000400000-0x0000000000526000-memory.dmp

    Filesize

    1.1MB

  • memory/2284-100-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2284-133-0x0000000000400000-0x0000000000526000-memory.dmp

    Filesize

    1.1MB

  • memory/2284-172-0x0000000000400000-0x0000000000526000-memory.dmp

    Filesize

    1.1MB

  • memory/2284-55-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/2284-176-0x0000000000400000-0x0000000000526000-memory.dmp

    Filesize

    1.1MB

  • memory/2284-177-0x0000000000400000-0x0000000000526000-memory.dmp

    Filesize

    1.1MB

  • memory/2284-178-0x0000000000400000-0x0000000000526000-memory.dmp

    Filesize

    1.1MB

  • memory/2284-181-0x0000000000400000-0x0000000000526000-memory.dmp

    Filesize

    1.1MB

  • memory/2284-182-0x0000000000400000-0x0000000000526000-memory.dmp

    Filesize

    1.1MB

  • memory/2284-183-0x0000000000400000-0x0000000000526000-memory.dmp

    Filesize

    1.1MB

  • memory/2284-184-0x0000000000400000-0x0000000000526000-memory.dmp

    Filesize

    1.1MB

  • memory/2284-185-0x0000000000400000-0x0000000000526000-memory.dmp

    Filesize

    1.1MB

  • memory/2284-186-0x0000000000400000-0x0000000000526000-memory.dmp

    Filesize

    1.1MB

  • memory/2284-187-0x0000000000400000-0x0000000000526000-memory.dmp

    Filesize

    1.1MB

  • memory/2284-188-0x0000000000400000-0x0000000000526000-memory.dmp

    Filesize

    1.1MB

  • memory/2284-193-0x0000000000400000-0x0000000000526000-memory.dmp

    Filesize

    1.1MB