Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

1653cf01f7...e8.exe

windows7-x64

7

1653cf01f7...e8.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    118s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20230712-en
  • resource tags

    arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
  • submitted
    28/08/2023, 14:09

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    1653cf01f7d1c267b4ec6db384dcc81cb886847a09b4811df78e07ab1795cbe8.exe

  • Size

    13.3MB

  • MD5

    9c351eadb8cb394bb802a16c465284df

  • SHA1

    b1a7a7ec35574cac4aea39be9380fbd98a2e0fb4

  • SHA256

    1653cf01f7d1c267b4ec6db384dcc81cb886847a09b4811df78e07ab1795cbe8

  • SHA512

    28c5b3aafe54250c8ee3ed72fd710ab1b955ede6803565bfcf0a95ae7770de52876d780e86e40be53d2b1b9d2f28ac7a24aa8305b4698a83a806a23d41608ff2

  • SSDEEP

    393216:zu7L/m/m3pMUAL2Vmd6mKMBkQJ4BSZ4aBGMki0M:zCLuKDAyVmdUkb4E+Mki0M

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 7 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1653cf01f7d1c267b4ec6db384dcc81cb886847a09b4811df78e07ab1795cbe8.exe
    "C:\Users\Admin\AppData\Local\Temp\1653cf01f7d1c267b4ec6db384dcc81cb886847a09b4811df78e07ab1795cbe8.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:3020
    • C:\Users\Admin\AppData\Local\Temp\1653cf01f7d1c267b4ec6db384dcc81cb886847a09b4811df78e07ab1795cbe8.exe
      "C:\Users\Admin\AppData\Local\Temp\1653cf01f7d1c267b4ec6db384dcc81cb886847a09b4811df78e07ab1795cbe8.exe"
      2⤵
      • Loads dropped DLL
      PID:3064

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\_MEI30202\api-ms-win-core-file-l1-2-0.dll
    Filesize

    11KB

    MD5

    35bc1f1c6fbccec7eb8819178ef67664

    SHA1

    bbcad0148ff008e984a75937aaddf1ef6fda5e0c

    SHA256

    7a3c5167731238cf262f749aa46ab3bfb2ae1b22191b76e28e1d7499d28c24b7

    SHA512

    9ab9b5b12215e57af5b3c588ed5003d978071dc591ed18c78c4563381a132edb7b2c508a8b75b4f1ed8823118d23c88eda453cd4b42b9020463416f8f6832a3d

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_MEI30202\api-ms-win-core-file-l2-1-0.dll
    Filesize

    11KB

    MD5

    3bf4406de02aa148f460e5d709f4f67d

    SHA1

    89b28107c39bb216da00507ffd8adb7838d883f6

    SHA256

    349a79fa1572e3538dfbb942610d8c47d03e8a41b98897bc02ec7e897d05237e

    SHA512

    5ff6e8ad602d9e31ac88e06a6fbb54303c57d011c388f46d957aee8cd3b7d7cced8b6bfa821ff347ade62f7359acb1fba9ee181527f349c03d295bdb74efbace

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_MEI30202\api-ms-win-core-localization-l1-2-0.dll
    Filesize

    13KB

    MD5

    8acb83d102dabd9a5017a94239a2b0c6

    SHA1

    9b43a40a7b498e02f96107e1524fe2f4112d36ae

    SHA256

    059cb23fdcf4d80b92e3da29e9ef4c322edf6fba9a1837978fd983e9bdfc7413

    SHA512

    b7ecf60e20098ea509b76b1cc308a954a6ede8d836bf709790ce7d4bd1b85b84cf5f3aedf55af225d2d21fbd3065d01aa201dae6c131b8e1e3aa80ed6fc910a4

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_MEI30202\api-ms-win-core-processthreads-l1-1-1.dll
    Filesize

    11KB

    MD5

    9c9b50b204fcb84265810ef1f3c5d70a

    SHA1

    0913ab720bd692abcdb18a2609df6a7f85d96db3

    SHA256

    25a99bdf8bf4d16077dc30dd9ffef7bb5a2ceaf9afcee7cf52ad408355239d40

    SHA512

    ea2d22234e587ad9fa255d9f57907cc14327ead917fdede8b0a38516e7c7a08c4172349c8a7479ec55d1976a37e520628006f5c362f6a3ec76ec87978c4469cd

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_MEI30202\api-ms-win-core-timezone-l1-1-0.dll
    Filesize

    11KB

    MD5

    43e1ae2e432eb99aa4427bb68f8826bb

    SHA1

    eee1747b3ade5a9b985467512215caf7e0d4cb9b

    SHA256

    3d798b9c345a507e142e8dacd7fb6c17528cc1453abfef2ffa9710d2fa9e032c

    SHA512

    40ec0482f668bde71aeb4520a0709d3e84f093062bfbd05285e2cc09b19b7492cb96cdd6056281c213ab0560f87bd485ee4d2aeefa0b285d2d005634c1f3af0b

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_MEI30202\python310.dll
    Filesize

    4.2MB

    MD5

    e9c0fbc99d19eeedad137557f4a0ab21

    SHA1

    8945e1811ceb4b26f21edcc7a36dcf2b1d34f0bf

    SHA256

    5783c5c5a3ffce181691f19d27de376a03010d32e41360b72bcdbd28467cfcc5

    SHA512

    74e1289683642ae2bc3cf780a07af1f27fed2011ef6cc67380f9c066c59d17a2fb2394a45a5c6cd75dad812a61093fdbd0f2108925f5c58fc6644c1c98be5c0b

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_MEI30202\ucrtbase.dll
    Filesize

    987KB

    MD5

    61eb0ad4c285b60732353a0cb5c9b2ab

    SHA1

    21a1bea01f6ca7e9828a522c696853706d0a457b

    SHA256

    10521fe73fe05f2ba95d40757d9f676f2091e2ed578da9d5cdef352f986f3bcd

    SHA512

    44cd871f48b5193abb3b9664dbea8cdad19e72c47b6967c685cf1cc803bc9abb48a8a93009c972ef4936e7f78e3c92110828790aa0a9d26b80e6a523bbcd830d

    Download Submit

  • \Users\Admin\AppData\Local\Temp\_MEI30202\api-ms-win-core-file-l1-2-0.dll
    Filesize

    11KB

    MD5

    35bc1f1c6fbccec7eb8819178ef67664

    SHA1

    bbcad0148ff008e984a75937aaddf1ef6fda5e0c

    SHA256

    7a3c5167731238cf262f749aa46ab3bfb2ae1b22191b76e28e1d7499d28c24b7

    SHA512

    9ab9b5b12215e57af5b3c588ed5003d978071dc591ed18c78c4563381a132edb7b2c508a8b75b4f1ed8823118d23c88eda453cd4b42b9020463416f8f6832a3d

    Download Submit

  • \Users\Admin\AppData\Local\Temp\_MEI30202\api-ms-win-core-file-l2-1-0.dll
    Filesize

    11KB

    MD5

    3bf4406de02aa148f460e5d709f4f67d

    SHA1

    89b28107c39bb216da00507ffd8adb7838d883f6

    SHA256

    349a79fa1572e3538dfbb942610d8c47d03e8a41b98897bc02ec7e897d05237e

    SHA512

    5ff6e8ad602d9e31ac88e06a6fbb54303c57d011c388f46d957aee8cd3b7d7cced8b6bfa821ff347ade62f7359acb1fba9ee181527f349c03d295bdb74efbace

    Download Submit

  • \Users\Admin\AppData\Local\Temp\_MEI30202\api-ms-win-core-localization-l1-2-0.dll
    Filesize

    13KB

    MD5

    8acb83d102dabd9a5017a94239a2b0c6

    SHA1

    9b43a40a7b498e02f96107e1524fe2f4112d36ae

    SHA256

    059cb23fdcf4d80b92e3da29e9ef4c322edf6fba9a1837978fd983e9bdfc7413

    SHA512

    b7ecf60e20098ea509b76b1cc308a954a6ede8d836bf709790ce7d4bd1b85b84cf5f3aedf55af225d2d21fbd3065d01aa201dae6c131b8e1e3aa80ed6fc910a4

    Download Submit

  • \Users\Admin\AppData\Local\Temp\_MEI30202\api-ms-win-core-processthreads-l1-1-1.dll
    Filesize

    11KB

    MD5

    9c9b50b204fcb84265810ef1f3c5d70a

    SHA1

    0913ab720bd692abcdb18a2609df6a7f85d96db3

    SHA256

    25a99bdf8bf4d16077dc30dd9ffef7bb5a2ceaf9afcee7cf52ad408355239d40

    SHA512

    ea2d22234e587ad9fa255d9f57907cc14327ead917fdede8b0a38516e7c7a08c4172349c8a7479ec55d1976a37e520628006f5c362f6a3ec76ec87978c4469cd

    Download Submit

  • \Users\Admin\AppData\Local\Temp\_MEI30202\api-ms-win-core-timezone-l1-1-0.dll
    Filesize

    11KB

    MD5

    43e1ae2e432eb99aa4427bb68f8826bb

    SHA1

    eee1747b3ade5a9b985467512215caf7e0d4cb9b

    SHA256

    3d798b9c345a507e142e8dacd7fb6c17528cc1453abfef2ffa9710d2fa9e032c

    SHA512

    40ec0482f668bde71aeb4520a0709d3e84f093062bfbd05285e2cc09b19b7492cb96cdd6056281c213ab0560f87bd485ee4d2aeefa0b285d2d005634c1f3af0b

    Download Submit

  • \Users\Admin\AppData\Local\Temp\_MEI30202\python310.dll
    Filesize

    4.2MB

    MD5

    e9c0fbc99d19eeedad137557f4a0ab21

    SHA1

    8945e1811ceb4b26f21edcc7a36dcf2b1d34f0bf

    SHA256

    5783c5c5a3ffce181691f19d27de376a03010d32e41360b72bcdbd28467cfcc5

    SHA512

    74e1289683642ae2bc3cf780a07af1f27fed2011ef6cc67380f9c066c59d17a2fb2394a45a5c6cd75dad812a61093fdbd0f2108925f5c58fc6644c1c98be5c0b

    Download Submit

  • \Users\Admin\AppData\Local\Temp\_MEI30202\ucrtbase.dll
    Filesize

    987KB

    MD5

    61eb0ad4c285b60732353a0cb5c9b2ab

    SHA1

    21a1bea01f6ca7e9828a522c696853706d0a457b

    SHA256

    10521fe73fe05f2ba95d40757d9f676f2091e2ed578da9d5cdef352f986f3bcd

    SHA512

    44cd871f48b5193abb3b9664dbea8cdad19e72c47b6967c685cf1cc803bc9abb48a8a93009c972ef4936e7f78e3c92110828790aa0a9d26b80e6a523bbcd830d

    Download Submit