Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
140s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system -
submitted
28/08/2023, 22:44
Static task
static1
Behavioral task
behavioral1
Sample
03f5ed3ea476b8759bfac32ca400cbe46112a8098417ab9b2c30351206285f86.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
03f5ed3ea476b8759bfac32ca400cbe46112a8098417ab9b2c30351206285f86.exe
Resource
win10v2004-20230703-en
General
-
Target
03f5ed3ea476b8759bfac32ca400cbe46112a8098417ab9b2c30351206285f86.exe
-
Size
3.6MB
-
MD5
8aa13bfccdc7ca18f61ad7b302daff34
-
SHA1
701b42cdf8db2a26618d57052b7ff6818a613708
-
SHA256
03f5ed3ea476b8759bfac32ca400cbe46112a8098417ab9b2c30351206285f86
-
SHA512
c08943f0792b1199e7938e483db453c0481e5a492adca004d0f52a01aa4a20519410c92d1b066a03018f94d845a71f4f86b90e372f1361a06d488a8aac63430b
-
SSDEEP
49152:9NrYtbAbbc0CGVHCcOxqoppLXCIYrKMtlBdukXK6f/8LYFlNKVZk9XoJyRk6G5hy:9rbc0dxOfbCIYflBduQn8y9Xwyu6GLx4
Malware Config
Signatures
-
Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\E: 03f5ed3ea476b8759bfac32ca400cbe46112a8098417ab9b2c30351206285f86.exe File opened (read-only) \??\G: 03f5ed3ea476b8759bfac32ca400cbe46112a8098417ab9b2c30351206285f86.exe File opened (read-only) \??\H: 03f5ed3ea476b8759bfac32ca400cbe46112a8098417ab9b2c30351206285f86.exe File opened (read-only) \??\I: 03f5ed3ea476b8759bfac32ca400cbe46112a8098417ab9b2c30351206285f86.exe File opened (read-only) \??\K: 03f5ed3ea476b8759bfac32ca400cbe46112a8098417ab9b2c30351206285f86.exe File opened (read-only) \??\P: 03f5ed3ea476b8759bfac32ca400cbe46112a8098417ab9b2c30351206285f86.exe File opened (read-only) \??\R: 03f5ed3ea476b8759bfac32ca400cbe46112a8098417ab9b2c30351206285f86.exe File opened (read-only) \??\W: 03f5ed3ea476b8759bfac32ca400cbe46112a8098417ab9b2c30351206285f86.exe File opened (read-only) \??\X: 03f5ed3ea476b8759bfac32ca400cbe46112a8098417ab9b2c30351206285f86.exe File opened (read-only) \??\Y: 03f5ed3ea476b8759bfac32ca400cbe46112a8098417ab9b2c30351206285f86.exe File opened (read-only) \??\J: 03f5ed3ea476b8759bfac32ca400cbe46112a8098417ab9b2c30351206285f86.exe File opened (read-only) \??\L: 03f5ed3ea476b8759bfac32ca400cbe46112a8098417ab9b2c30351206285f86.exe File opened (read-only) \??\N: 03f5ed3ea476b8759bfac32ca400cbe46112a8098417ab9b2c30351206285f86.exe File opened (read-only) \??\S: 03f5ed3ea476b8759bfac32ca400cbe46112a8098417ab9b2c30351206285f86.exe File opened (read-only) \??\T: 03f5ed3ea476b8759bfac32ca400cbe46112a8098417ab9b2c30351206285f86.exe File opened (read-only) \??\Z: 03f5ed3ea476b8759bfac32ca400cbe46112a8098417ab9b2c30351206285f86.exe File opened (read-only) \??\A: 03f5ed3ea476b8759bfac32ca400cbe46112a8098417ab9b2c30351206285f86.exe File opened (read-only) \??\B: 03f5ed3ea476b8759bfac32ca400cbe46112a8098417ab9b2c30351206285f86.exe File opened (read-only) \??\M: 03f5ed3ea476b8759bfac32ca400cbe46112a8098417ab9b2c30351206285f86.exe File opened (read-only) \??\O: 03f5ed3ea476b8759bfac32ca400cbe46112a8098417ab9b2c30351206285f86.exe File opened (read-only) \??\Q: 03f5ed3ea476b8759bfac32ca400cbe46112a8098417ab9b2c30351206285f86.exe File opened (read-only) \??\U: 03f5ed3ea476b8759bfac32ca400cbe46112a8098417ab9b2c30351206285f86.exe File opened (read-only) \??\V: 03f5ed3ea476b8759bfac32ca400cbe46112a8098417ab9b2c30351206285f86.exe