Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
-
submitted
23/09/2023, 06:32
General
-
Target
Intel-Driver-and-Support-Assistant-Installer.exe
-
Size
5.7MB
-
MD5
5aeed594cdeac9e07eef948745708673
-
SHA1
e03408fe345185a5926c935faf0127755b7a055d
-
SHA256
b86b177015444922022d8fb0c7fa03cf6c56d01d727ee18ff45af0589504fbb7
-
SHA512
0a0ef29e987758a66a66145a9f71a93705088ebe520963d9d153f7e697550d61e14d9ae540b29759fa552912a9dc59509e15f1c248320e3c280f5478c054cef7
-
SSDEEP
98304:xT0hMKcMgi3/1ZQGkYZ0spHNo0UBFd0MxfXcgPxk3xl900vFn5T1h/nc2KfsKlUY:xT8MKc+9qGk9GHvUBgM7xMzV5Rlc2KU+
Malware Config
Signatures
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 8 IoCs
-
Suspicious use of WriteProcessMemory 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Intel-Driver-and-Support-Assistant-Installer.exe"C:\Users\Admin\AppData\Local\Temp\Intel-Driver-and-Support-Assistant-Installer.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Windows\Temp\{87FE2D7F-4C20-4760-AF1B-586717FCF7B9}\.cr\Intel-Driver-and-Support-Assistant-Installer.exe"C:\Windows\Temp\{87FE2D7F-4C20-4760-AF1B-586717FCF7B9}\.cr\Intel-Driver-and-Support-Assistant-Installer.exe" -burn.clean.room="C:\Users\Admin\AppData\Local\Temp\Intel-Driver-and-Support-Assistant-Installer.exe" -burn.filehandle.attached=180 -burn.filehandle.self=1882⤵
- Executes dropped EXE
- Loads dropped DLL
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.1MB
MD57db269ac09ee0a41012962e3322b1d19
SHA1e69447a785e8830b37ebb0093b9ec6cd59a51b45
SHA256ff20c63cc394e52adf8f39a0de4a62102b61ee49c6a4f1a37cfc5eb7c6649c78
SHA51265dc1c05c88239fa15dc350f20fb0f2b408a2e78b79a9dfff20266f2471ba325248aa364a8fba2b6df894efb662626755c47473ccaebc7453f481f9ca0eb6a37
-
Filesize
1.1MB
MD57db269ac09ee0a41012962e3322b1d19
SHA1e69447a785e8830b37ebb0093b9ec6cd59a51b45
SHA256ff20c63cc394e52adf8f39a0de4a62102b61ee49c6a4f1a37cfc5eb7c6649c78
SHA51265dc1c05c88239fa15dc350f20fb0f2b408a2e78b79a9dfff20266f2471ba325248aa364a8fba2b6df894efb662626755c47473ccaebc7453f481f9ca0eb6a37
-
Filesize
803B
MD564248d2c500318bdd1f963905302ba87
SHA1b075b452515b033f130518e83ad05f1896efb9f5
SHA2566d03dc041d84644b0ce097f9313ed49ce38604b664db444aece1640731625298
SHA5121909784250a9365a8a0d4d0c50a43553bd9003965fead60ac8d0315276a65b43e9c32a57216461cda0b68feae1d56d0c0242d18ed2202d424e04395e939cc68e
-
Filesize
1.1MB
MD57db269ac09ee0a41012962e3322b1d19
SHA1e69447a785e8830b37ebb0093b9ec6cd59a51b45
SHA256ff20c63cc394e52adf8f39a0de4a62102b61ee49c6a4f1a37cfc5eb7c6649c78
SHA51265dc1c05c88239fa15dc350f20fb0f2b408a2e78b79a9dfff20266f2471ba325248aa364a8fba2b6df894efb662626755c47473ccaebc7453f481f9ca0eb6a37
-
Filesize
87KB
MD5b0d10a2a622a322788780e7a3cbb85f3
SHA104d90b16fa7b47a545c1133d5c0ca9e490f54633
SHA256f2c2b3ce2df70a3206f3111391ffc7b791b32505fa97aef22c0c2dbf6f3b0426
SHA51262b0aa09234067e67969c5f785736d92cd7907f1f680a07f6b44a1caf43bfeb2df96f29034016f3345c4580c6c9bc1b04bea932d06e53621da4fcf7b8c0a489f
-
Filesize
87KB
MD5b0d10a2a622a322788780e7a3cbb85f3
SHA104d90b16fa7b47a545c1133d5c0ca9e490f54633
SHA256f2c2b3ce2df70a3206f3111391ffc7b791b32505fa97aef22c0c2dbf6f3b0426
SHA51262b0aa09234067e67969c5f785736d92cd7907f1f680a07f6b44a1caf43bfeb2df96f29034016f3345c4580c6c9bc1b04bea932d06e53621da4fcf7b8c0a489f
-
Filesize
415KB
MD53b4a049801eb311f69c4165bd001692b
SHA1b9b165ca0602eee6a827b776e6a1b3c4bcc26774
SHA256e75da441a631f5115d62f7521e71bd6b1430f3b4f9403c7038b3e5e3a9db0759
SHA512b4202d3a86674c8edec034181c18e5dcbed7de86e348567017b7108048be8cd647c13fcc95fb499cf15089789d9fd537ac29410d411f77edf7c7605066b36b6a
-
Filesize
415KB
MD53b4a049801eb311f69c4165bd001692b
SHA1b9b165ca0602eee6a827b776e6a1b3c4bcc26774
SHA256e75da441a631f5115d62f7521e71bd6b1430f3b4f9403c7038b3e5e3a9db0759
SHA512b4202d3a86674c8edec034181c18e5dcbed7de86e348567017b7108048be8cd647c13fcc95fb499cf15089789d9fd537ac29410d411f77edf7c7605066b36b6a
-
Filesize
29KB
MD5af04687248da9e95a7ff65ab538d0bcf
SHA17511184300e2b6f70bc92333392386a812b2dabf
SHA256b097fca120a9e76fa870d82662bdd233adbf08fc34a3c509f31cc5ced0ac1ecf
SHA512a5eab337f6386de5fb2cc809730bac7d17cdfb309afea32e65e9d8c457f97ac3e3f03cebd48535cf253e28f3aa600f234631c2060ec59acb917cb5f135f4b67a
-
Filesize
29KB
MD5af04687248da9e95a7ff65ab538d0bcf
SHA17511184300e2b6f70bc92333392386a812b2dabf
SHA256b097fca120a9e76fa870d82662bdd233adbf08fc34a3c509f31cc5ced0ac1ecf
SHA512a5eab337f6386de5fb2cc809730bac7d17cdfb309afea32e65e9d8c457f97ac3e3f03cebd48535cf253e28f3aa600f234631c2060ec59acb917cb5f135f4b67a
-
Filesize
119KB
MD5c59832217903ce88793a6c40888e3cae
SHA16d9facabf41dcf53281897764d467696780623b8
SHA2569dfa1bc5d2ab4c652304976978749141b8c312784b05cb577f338a0aa91330db
SHA5121b1f4cb2e3fa57cb481e28a967b19a6fefa74f3c77a3f3214a6b09e11ceb20ae428d036929f000710b4eb24a2c57d5d7dfe39661d5a1f48ee69a02d83381d1a9
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
432KB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
56KB
-
Filesize
40KB
-
Filesize
32KB
-
Filesize
256KB
-
Filesize
6.9MB
-
Filesize
96KB
-
Filesize
32KB
-
Filesize
40KB
-
Filesize
40KB
-
Filesize
6.9MB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
40KB