Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    140s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20230712-en
  • resource tags

    arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
  • submitted
    28/08/2023, 22:44

General

  • Target

    03f5ed3ea476b8759bfac32ca400cbe46112a8098417ab9b2c30351206285f86.exe

  • Size

    3.6MB

  • MD5

    8aa13bfccdc7ca18f61ad7b302daff34

  • SHA1

    701b42cdf8db2a26618d57052b7ff6818a613708

  • SHA256

    03f5ed3ea476b8759bfac32ca400cbe46112a8098417ab9b2c30351206285f86

  • SHA512

    c08943f0792b1199e7938e483db453c0481e5a492adca004d0f52a01aa4a20519410c92d1b066a03018f94d845a71f4f86b90e372f1361a06d488a8aac63430b

  • SSDEEP

    49152:9NrYtbAbbc0CGVHCcOxqoppLXCIYrKMtlBdukXK6f/8LYFlNKVZk9XoJyRk6G5hy:9rbc0dxOfbCIYflBduQn8y9Xwyu6GLx4

Score
6/10

Malware Config

Signatures

  • Enumerates connected drives 3 TTPs 23 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

Processes

  • C:\Users\Admin\AppData\Local\Temp\03f5ed3ea476b8759bfac32ca400cbe46112a8098417ab9b2c30351206285f86.exe
    "C:\Users\Admin\AppData\Local\Temp\03f5ed3ea476b8759bfac32ca400cbe46112a8098417ab9b2c30351206285f86.exe"
    1⤵
    • Enumerates connected drives
    PID:2300

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2300-0-0x0000000000400000-0x0000000000A49000-memory.dmp

    Filesize

    6.3MB

  • memory/2300-1-0x0000000000220000-0x0000000000223000-memory.dmp

    Filesize

    12KB

  • memory/2300-2-0x0000000000400000-0x0000000000A49000-memory.dmp

    Filesize

    6.3MB

  • memory/2300-4-0x0000000000400000-0x0000000000A49000-memory.dmp

    Filesize

    6.3MB

  • memory/2300-5-0x0000000000220000-0x0000000000221000-memory.dmp

    Filesize

    4KB

  • memory/2300-6-0x0000000000400000-0x0000000000A49000-memory.dmp

    Filesize

    6.3MB

  • memory/2300-8-0x0000000000220000-0x0000000000221000-memory.dmp

    Filesize

    4KB