Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
11/10/2023, 05:08
Behavioral task
behavioral1
Sample
Bo2 menu V2.exe
Resource
win7-20230831-en
General
-
Target
Bo2 menu V2.exe
-
Size
7.3MB
-
MD5
6ae89e53d47145458f005252067d5796
-
SHA1
c338aecd4028d86b31f6989d3e4bb79197e589e7
-
SHA256
d4569ed45e09d8a1557df7a5b8e150056ad7e82e8ddb605f36b3251981d46255
-
SHA512
fc27aa59f7aa3e62d4b0906356df3deb1b6c41082fc763d62ee3d39777b40203ab5e8dae6e5ea29fbe4061bddb895d3ff504c6c94ef8d612082df03d06f25df6
-
SSDEEP
196608:lu7YS6GOshoKMuIkhVastRL5Di3uq1D7mu:gYSTOshouIkPftRL54DR3
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 2736 Bo2 menu V2.exe -
resource yara_rule behavioral1/files/0x0006000000016cdb-21.dat upx behavioral1/files/0x0006000000016cdb-22.dat upx behavioral1/memory/2736-23-0x000007FEF5B10000-0x000007FEF60F9000-memory.dmp upx -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 2036 wrote to memory of 2736 2036 Bo2 menu V2.exe 28 PID 2036 wrote to memory of 2736 2036 Bo2 menu V2.exe 28 PID 2036 wrote to memory of 2736 2036 Bo2 menu V2.exe 28
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.6MB
MD55f6fd64ec2d7d73ae49c34dd12cedb23
SHA1c6e0385a868f3153a6e8879527749db52dce4125
SHA256ff9f102264d1944fbfae2ba70e7a71435f51a3e8c677fd970b621c4c9ea71967
SHA512c4be2d042c6e4d22e46eacfd550f61b8f55814bfe41d216a4df48382247df70bc63151068513855aa78f9b3d2f10ba6a824312948324c92de6dd0f6af414e8ab
-
Filesize
1.6MB
MD55f6fd64ec2d7d73ae49c34dd12cedb23
SHA1c6e0385a868f3153a6e8879527749db52dce4125
SHA256ff9f102264d1944fbfae2ba70e7a71435f51a3e8c677fd970b621c4c9ea71967
SHA512c4be2d042c6e4d22e46eacfd550f61b8f55814bfe41d216a4df48382247df70bc63151068513855aa78f9b3d2f10ba6a824312948324c92de6dd0f6af414e8ab