Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system -
submitted
04/08/2023, 17:47
Behavioral task
behavioral1
Sample
E4G24DU1GQR.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
E4G24DU1GQR.exe
Resource
win10v2004-20230703-en
General
-
Target
E4G24DU1GQR.exe
-
Size
10.1MB
-
MD5
274ac4d59e5bf71927f1013b270c7eab
-
SHA1
b5a568e19c3cf5b7e26673d5eb3c77bd146a2ecb
-
SHA256
97646796eab26c2005511c2939821bbdc624afb4704450ba3b2ef91b122c01a5
-
SHA512
e7247d76a447ff8f524c572f6006fcb04af5c9bb8b51db3d969971000050d67efbba34e596a11467b76a0b5f850709ad941c3e6cd79b61e7dc4ce395bcc5bba0
-
SSDEEP
196608:/NDna+butR4FMIZETSt3jPePdrQJ2BNOq62gAqYPYgUFHN:lDnaOyRQETSBvJSOq62YHtFHN
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 2388 E4G24DU1GQR.exe -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 1956 wrote to memory of 2388 1956 E4G24DU1GQR.exe 28 PID 1956 wrote to memory of 2388 1956 E4G24DU1GQR.exe 28 PID 1956 wrote to memory of 2388 1956 E4G24DU1GQR.exe 28
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
5.5MB
MD55a5dd7cad8028097842b0afef45bfbcf
SHA1e247a2e460687c607253949c52ae2801ff35dc4a
SHA256a811c7516f531f1515d10743ae78004dd627eba0dc2d3bc0d2e033b2722043ce
SHA512e6268e4fad2ce3ef16b68298a57498e16f0262bf3531539ad013a66f72df471569f94c6fcc48154b7c3049a3ad15cbfcbb6345dacb4f4ed7d528c74d589c9858
-
Filesize
5.5MB
MD55a5dd7cad8028097842b0afef45bfbcf
SHA1e247a2e460687c607253949c52ae2801ff35dc4a
SHA256a811c7516f531f1515d10743ae78004dd627eba0dc2d3bc0d2e033b2722043ce
SHA512e6268e4fad2ce3ef16b68298a57498e16f0262bf3531539ad013a66f72df471569f94c6fcc48154b7c3049a3ad15cbfcbb6345dacb4f4ed7d528c74d589c9858