Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    155s
  • platform
    windows7_x64
  • resource
    win7-20230712-en
  • resource tags

    arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
  • submitted
    01/08/2023, 19:38

General

  • Target

    Newlogforshell18_browsingExe.exe

  • Size

    701KB

  • MD5

    26cff833eed7465c4c74580031baf735

  • SHA1

    ae62ddb1deeeda07535e10d90f9d87307b0e11ff

  • SHA256

    ef25f37fb988e1e041e5dbbd6f30aac3918e540fc253964b054fc1ec6e45b6a2

  • SHA512

    8b8f740a945f9728cd077a24a4054d86224ea4c034c80a3377743eaedaa42ce68c8ec690b0be2d58731e729836105858d715897e1e63b509c94157a03a712b73

  • SSDEEP

    12288:/5KggX3QpKzfFmOMExypt/BlM/947f07hfd2wNUO28ux5b:BKHX3eKHc/O4707hfd9NUO2rxp

Score
4/10

Malware Config

Signatures

  • Drops file in Windows directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Newlogforshell18_browsingExe.exe
    "C:\Users\Admin\AppData\Local\Temp\Newlogforshell18_browsingExe.exe"
    1⤵
    • Drops file in Windows directory
    PID:1980

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lnk{ABC639CB-7214-6847-E92A-01C142D1F61E}.tmp

    Filesize

    139B

    MD5

    03912cb908ecc2b093f61cedd8c01a1e

    SHA1

    b2a8a7ef690009d069e363df2a852d991fe2cc73

    SHA256

    c74646f8684f1a444bf10e4df587d6ccf103d385a1b55ee5514d5b8fdd75d0bb

    SHA512

    3085190bd7bcefba87125d8e5a30fc0289e0d07e1dae0b13dab7f76a183005dad3882f30a8d82c67443d95505eb0208aa60561693720b9dcfec769c845557042

  • memory/1980-54-0x0000000000070000-0x0000000000074000-memory.dmp

    Filesize

    16KB

  • memory/1980-55-0x0000000001D00000-0x0000000001D78000-memory.dmp

    Filesize

    480KB

  • memory/1980-57-0x0000000001D00000-0x0000000001D78000-memory.dmp

    Filesize

    480KB

  • memory/1980-58-0x0000000001D00000-0x0000000001D78000-memory.dmp

    Filesize

    480KB

  • memory/1980-59-0x0000000001D00000-0x0000000001D78000-memory.dmp

    Filesize

    480KB

  • memory/1980-62-0x0000000001D00000-0x0000000001D78000-memory.dmp

    Filesize

    480KB