Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

4398c17fd9...0d.exe

windows7-x64

1

4398c17fd9...0d.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    15/10/2023, 17:57

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    4398c17fd9f29eba8b0930892f01481c885bf06c2d2489ef9e6639693871600d.exe

  • Size

    5.1MB

  • MD5

    4ecd860ca58821a52582c02c404ffaef

  • SHA1

    ae16fc9b1434491d9830294ddb01d216e407e05d

  • SHA256

    4398c17fd9f29eba8b0930892f01481c885bf06c2d2489ef9e6639693871600d

  • SHA512

    cc400d44e77c7004eae0f994106ac482863be40e610b6583fd1656441ea201b3bb895011f4ecbb72324cb81c6139d9b831a489a7015b070df7570d27e83f24ca

  • SSDEEP

    98304:zHq1VP3sOdZBt5uSCPWi4c6fOXhxiwOYlNa1lMu2MkdYVg29tapbiumskUm:TqXT1hCPWu6fYTiTe0JXJq2PotFm

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\4398c17fd9f29eba8b0930892f01481c885bf06c2d2489ef9e6639693871600d.exe
    "C:\Users\Admin\AppData\Local\Temp\4398c17fd9f29eba8b0930892f01481c885bf06c2d2489ef9e6639693871600d.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:1956

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1956-2-0x000000013F3A0000-0x000000013FF4F000-memory.dmp

    Filesize

    11.7MB

    Download

  • memory/1956-3-0x0000000001F30000-0x000000000265E000-memory.dmp

    Filesize

    7.2MB

    Download

  • memory/1956-5-0x000000013F3A0000-0x000000013FF4F000-memory.dmp

    Filesize

    11.7MB

    Download

  • memory/1956-7-0x000000013F3A0000-0x000000013FF4F000-memory.dmp

    Filesize

    11.7MB

    Download