Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system -
submitted
14/08/2023, 23:58
Static task
static1
Behavioral task
behavioral1
Sample
Notepad++.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
Notepad++.exe
Resource
win10v2004-20230703-en
General
-
Target
Notepad++.exe
-
Size
3.5MB
-
MD5
a327dd44a4e2f0e35364bde7c4a59718
-
SHA1
071a81782d88810b0084bd2162c67cf0ff3ad13f
-
SHA256
6787c524b0ac30a698237ffb035f932d7132343671b8fe8f0388ed380d19a51c
-
SHA512
845213cccabc6d4a60673536ab54465d176312dd83ff51cbffc8b1aa08aa07ec88afb32904732ee0a936bdb37e30a52ef0258f1e61198aec9ff054cbfff98300
-
SSDEEP
98304:LvP59bXolEMWzIcUKUwQOC8bz3JICi29jv:LzXol70/U5wBf3Jli29jv
Malware Config
Signatures
-
Loads dropped DLL 4 IoCs
pid Process 2400 Notepad++.exe 2400 Notepad++.exe 2400 Notepad++.exe 2400 Notepad++.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2400 Notepad++.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
15KB
MD505bf02da51e717f79f6b5cbea7bc0710
SHA107471a64ef4dba9dc19ce68ae6cce683af7df86d
SHA256ca092ba7f275b0c9000098cdd1a9876fe8dc050fcb40a0e8a1ab8335236e9dc5
SHA512c09e475babd5eb675cdf903b2b754b8b68450a731cb520f3dcbf9abe0ed03d19256f009429977d3a51decb3a2a938be0b28dbafeb407409fa85e54da6dbaaad6
-
Filesize
1KB
MD5299caf269855b5c60411396306f0d2a4
SHA173778bedd6402b1bcd945d6ebd96573e3d4494e0
SHA2560e52a69b405dc033634e0b0e5a5edfc4673d93eb101a945bbb510edeca386a14
SHA51283f0ee2d935064dc1dc9eff44230ca66ddcb13894afd5edc73bfe5732cf266d2d42f9fbe7a455cce5bc7814c367ff6422dde46b229c2059889f523d2b10b2b62
-
Filesize
15KB
MD505bf02da51e717f79f6b5cbea7bc0710
SHA107471a64ef4dba9dc19ce68ae6cce683af7df86d
SHA256ca092ba7f275b0c9000098cdd1a9876fe8dc050fcb40a0e8a1ab8335236e9dc5
SHA512c09e475babd5eb675cdf903b2b754b8b68450a731cb520f3dcbf9abe0ed03d19256f009429977d3a51decb3a2a938be0b28dbafeb407409fa85e54da6dbaaad6
-
Filesize
15KB
MD505bf02da51e717f79f6b5cbea7bc0710
SHA107471a64ef4dba9dc19ce68ae6cce683af7df86d
SHA256ca092ba7f275b0c9000098cdd1a9876fe8dc050fcb40a0e8a1ab8335236e9dc5
SHA512c09e475babd5eb675cdf903b2b754b8b68450a731cb520f3dcbf9abe0ed03d19256f009429977d3a51decb3a2a938be0b28dbafeb407409fa85e54da6dbaaad6
-
Filesize
5KB
MD5ab1db56369412fe8476fefffd11e4cc0
SHA1daad036a83b2ee2fa86d840a34a341100552e723
SHA2566f14c8f01f50a30743dac68c5ac813451463dfb427eb4e35fcdfe2410e1a913b
SHA5128d886643b4fc24adf78f76b663227d6e61863f89e0cbd49548f40dd040666ca94ea46bec9e336850e4f300995d56e6dc85b689c8e09ff46758822d280f06b03d
-
Filesize
12KB
MD50d7ad4f45dc6f5aa87f606d0331c6901
SHA148df0911f0484cbe2a8cdd5362140b63c41ee457
SHA2563eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
SHA512c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9