Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20231020-en -
resource tags
arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system -
submitted
22/10/2023, 08:53
Behavioral task
behavioral1
Sample
f2922a4e331acd5f567f30fa41a8fa06986b22c81c833c177ab4a7d434cd9145.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
f2922a4e331acd5f567f30fa41a8fa06986b22c81c833c177ab4a7d434cd9145.exe
Resource
win10v2004-20231020-en
General
-
Target
f2922a4e331acd5f567f30fa41a8fa06986b22c81c833c177ab4a7d434cd9145.exe
-
Size
27KB
-
MD5
02061b49edafff8a4d1b794e21be3b87
-
SHA1
f5dc846c5f9f2d171d2aca188377e2e439787b77
-
SHA256
f2922a4e331acd5f567f30fa41a8fa06986b22c81c833c177ab4a7d434cd9145
-
SHA512
2b52dceaf565bea7da025982c558c6da71c40d0de5c3e30f1762e4c824a29561a306bf6f8e4c2acc03b5991a01e8b0c1538df0e34184645686d4a0e1a273d417
-
SSDEEP
768:6TZi3u79UotAXZP9CZuZwkMgr8QX0RmlJvH3:6TTUotGZGuekMgQQX0RmlRH
Malware Config
Extracted
metasploit
windows/download_exec
http://192.168.16.129:80/HtNR
- headers User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0; ASU2JS)
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.