Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    13/10/2023, 01:44

General

  • Target

    b7da96601373ec4c8dbe3cef31ec05b2.exe

  • Size

    102KB

  • MD5

    b7da96601373ec4c8dbe3cef31ec05b2

  • SHA1

    c81416c22b6c18c040fc54ef6972a28efcf8bd82

  • SHA256

    93284d5b4f436b716386268d24c41971dd24c01a1fc1dacab90c19002076ed0b

  • SHA512

    2ba4b3657618724bf060ce4f1f4b4b7c34a905ada97219ccdc8bec62c668f47fe12d28d939842e80309a084127403e4480d9df6562355ab1717fc493a02dcafe

  • SSDEEP

    3072:OwZx7tPwbpTK8Q5Uzf4JElJvIT44UTChRq:vZ1xwbJKAzAElJA84pr

Score
10/10

Malware Config

Extracted

Family

stealc

C2

http://95.214.25.241

Attributes
  • url_path

    /29dca981ee82db8c.php

rc4.plain

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\b7da96601373ec4c8dbe3cef31ec05b2.exe
    "C:\Users\Admin\AppData\Local\Temp\b7da96601373ec4c8dbe3cef31ec05b2.exe"
    1⤵
      PID:1984

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1984-0-0x0000000001360000-0x000000000158D000-memory.dmp

      Filesize

      2.2MB

    • memory/1984-1-0x0000000001360000-0x000000000158D000-memory.dmp

      Filesize

      2.2MB