Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
142s -
max time network
148s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
-
submitted
08/08/2023, 18:52
General
-
Target
3222a0413cd776bf9f1103d86451c9e6aabbb2ffef07a85d870841245f3eacdf.exe
-
Size
776KB
-
MD5
f86133741ec9ee234b932ffd8019763e
-
SHA1
fa23cb832c6fd87258e0b21d3320f696f39e2726
-
SHA256
3222a0413cd776bf9f1103d86451c9e6aabbb2ffef07a85d870841245f3eacdf
-
SHA512
ea993598f78684d2951e5dcea651ec151f910ff2ef4ba3c6f55af969cedba7d15f7dd634f2c94889e2b61f947f19593ddbb124859ed6cc2cc7a02937d59ed922
-
SSDEEP
12288:tmYlI2y55jCY392p3N1NpzBUyqjKjc8+SQfZmaF2FOZL06k99M1UFM3Qz:tmYl5c5h3+g/jmR+vpFD0my
Malware Config
Signatures
-
UPX packed file 16 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies Internet Explorer settings 1 TTPs 34 IoCs
-
Modifies system certificate store 2 TTPs 2 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SendNotifyMessage 1 IoCs
-
Suspicious use of SetWindowsHookEx 6 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3222a0413cd776bf9f1103d86451c9e6aabbb2ffef07a85d870841245f3eacdf.exe"C:\Users\Admin\AppData\Local\Temp\3222a0413cd776bf9f1103d86451c9e6aabbb2ffef07a85d870841245f3eacdf.exe"1⤵
- Modifies Internet Explorer settings
- Modifies system certificate store
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
13B
MD5c1ddea3ef6bbef3e7060a1a9ad89e4c5
SHA135e3224fcbd3e1af306f2b6a2c6bbea9b0867966
SHA256b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db
SHA5126be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed
-
Filesize
106B
MD5719376da11885c80758bbcb288b11495
SHA1f80146accd40a18c3b539002a2a161c589be4783
SHA256d0fb53249a08b47a806db7ee85546bfe4be01e01058b0bead9298cc334242e09
SHA5123c1d7054176051919f4a54856c977a75edb68eb7984fff0b61748276705c1fe732cc52c4b61c8ac2b411ded63fcfa7494dbc799c5856cbfe188b5cbcfb7676a6
-
Filesize
51B
MD52fe6a9ac8d1b8aa4868ecb32e5967664
SHA1e014dc4278458812fac60ba5cea88a1647a0bca8
SHA256f9b9c509d895420f3e54aa226a4eea13bc4f7275860228e837bb8e954c3db88a
SHA5128513eb6e149241fa9434785994a20973ca1d1c049d33c0b4c78ede6b5518e3a1efaf14f55d4ade8847a30067c2cd4a1a657638d7aa4f2cb36ae35b33c595379d
-
Filesize
51B
MD57f3caf47dde94a9684497dfe2aaad46d
SHA13ad5bc979213d4f95a5585d73f9786f3e9730242
SHA256afcaa0eb594a76bcae5ef45151156d71ff070c198f372f09c3cacc4caffc1d21
SHA512a5a40534a9ca46ae6c9bc5dda1574f6166cce8228ecb88802f91c1105bbde2c7546edf492deff4d3a3836adb5584a2e2f51accdcdd5eea476db3c87ba3d64e7e
-
Filesize
84B
MD5ed87ed2d66dbbb49f9510dccbefb8e87
SHA1a839b0e28830da2fa1119d6027a1d837c2218566
SHA256cc29c6cac1d821b475723c0f2e625c9b414ceeea49f8c669c380000e73773846
SHA51215d61774597e9a28250bfbcade0fc207019c133284481f44c954203bdbfc918a5fde2e9780be956da1242a64b63257851de75538a2c544461bbad31a839cf902
-
Filesize
2.5MB
-
Filesize
2.5MB
-
Filesize
2.5MB
-
Filesize
64KB
-
Filesize
2.5MB
-
Filesize
2.5MB
-
Filesize
64KB
-
Filesize
2.5MB
-
Filesize
2.5MB
-
Filesize
2.5MB
-
Filesize
2.5MB
-
Filesize
2.5MB
-
Filesize
2.5MB
-
Filesize
2.5MB
-
Filesize
2.5MB
-
Filesize
2.5MB
-
Filesize
2.5MB
-
Filesize
2.5MB