Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20230712-en
  • resource tags

    arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
  • submitted
    30/08/2023, 07:05

General

  • Target

    c91a7e592ffe0bdf41e67c2af58a6d55.exe

  • Size

    540KB

  • MD5

    c91a7e592ffe0bdf41e67c2af58a6d55

  • SHA1

    3c026ff8ca64b94eb05d04af0994c7150b2c4075

  • SHA256

    dbeca7431cfb6a9a965c3d10bf19fce8ce2f6c7d2395ce5bd2a4f2135121be8a

  • SHA512

    9acafa7177abed5b3c7ee7b7086fefa2fd9e39cd029a5717af8f2c5a8a3d9dfe03ab9072a4cc6204e210cd24a69270156138b0fa434d008236c8d8e6ff82ea45

  • SSDEEP

    12288:j7czeVrwecDd0cIkZM3GqHhE6FlCCxKygxOBSTO6ubMu:jgzeVrwg6ZGGqWvjXxHUf

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: LoadsDriver 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c91a7e592ffe0bdf41e67c2af58a6d55.exe
    "C:\Users\Admin\AppData\Local\Temp\c91a7e592ffe0bdf41e67c2af58a6d55.exe"
    1⤵
      PID:1132

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1132-0-0x0000000001030000-0x00000000010BC000-memory.dmp

      Filesize

      560KB

    • memory/1132-1-0x000007FEF5990000-0x000007FEF637C000-memory.dmp

      Filesize

      9.9MB

    • memory/1132-2-0x000000001B2A0000-0x000000001B320000-memory.dmp

      Filesize

      512KB

    • memory/1132-3-0x0000000000CA0000-0x0000000000D28000-memory.dmp

      Filesize

      544KB

    • memory/1132-5-0x000007FEF5990000-0x000007FEF637C000-memory.dmp

      Filesize

      9.9MB

    • memory/1132-6-0x000000001B2A0000-0x000000001B320000-memory.dmp

      Filesize

      512KB