Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

d9f78da01d...00.exe

windows7-x64

10

d9f78da01d...00.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    118s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    19/10/2023, 02:36

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    d9f78da01d9dfffb16bc724e84cafba6d8819a148f417e9b32434a683180bc00.exe

  • Size

    21.8MB

  • MD5

    d6e5c5d9ad0fece02ec3020eaa9ce472

  • SHA1

    ca9276bbd764e3a510ff13be4e7e35b324d373fa

  • SHA256

    d9f78da01d9dfffb16bc724e84cafba6d8819a148f417e9b32434a683180bc00

  • SHA512

    be194a9ac18e5fab1582ae428dfaca0e158d05553e72ebf8e1af423c3fea4e05f03541853bc8e28bd700c29f7b841d1d1e9c683ef022a7c8d4e0f89c3bdcf9e2

  • SSDEEP

    196608:G9rTfn5Mp6Z9j2ujTh4e9q77AJsv6tWKFdu9CqKCS3K:GF+p6Z3Ph4e9qoJsv6tWKFdu9C0S

Score
10/10
magicratrattrojan

Malware Config

Signatures

  • Detected MagicRAT payload 1 IoCs
  • magicrat

    MagicRAT is a remote access trojan developed and operated by the Lazarus APT group.

    trojanratmagicrat

Processes

  • C:\Users\Admin\AppData\Local\Temp\d9f78da01d9dfffb16bc724e84cafba6d8819a148f417e9b32434a683180bc00.exe
    "C:\Users\Admin\AppData\Local\Temp\d9f78da01d9dfffb16bc724e84cafba6d8819a148f417e9b32434a683180bc00.exe"
    1⤵
      PID:1956

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1956-0-0x0000000000400000-0x00000000019E5000-memory.dmp

      Filesize

      21.9MB

      Download