Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231020-en
  • resource tags

    arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
  • submitted
    11/11/2023, 13:13

General

  • Target

    newtest.exe

  • Size

    8.4MB

  • MD5

    a521037485a10c106d14746ab51450d9

  • SHA1

    3b2da8d62aca24672bd7dbe8137fbc878873bf1c

  • SHA256

    63a6c74e23397d35f3bb684ccb35c81014d53a63a8e40b505249f8a6c3616ada

  • SHA512

    86ab3e14a7f813f78efcbf0e10c3698238eef861d0b4fe7e4f2f032c2e158f1ec22b26b8fff8f6d7f64d4c1ddd9ba36abc306ba03971b9ce7cc676a47f276b6f

  • SSDEEP

    196608:c4uprnn1W903eV4QRItpDjIIAcwDIlaUGcRPdvvk9UIi:iL1W+eGQRg9jocBGcGt

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\newtest.exe
    "C:\Users\Admin\AppData\Local\Temp\newtest.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1896
    • C:\Users\Admin\AppData\Local\Temp\newtest.exe
      "C:\Users\Admin\AppData\Local\Temp\newtest.exe"
      2⤵
      • Loads dropped DLL
      PID:2156

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\_MEI18962\python312.dll

    Filesize

    6.6MB

    MD5

    5c5602cda7ab8418420f223366fff5db

    SHA1

    52f81ee0aef9b6906f7751fd2bbd4953e3f3b798

    SHA256

    e7890e38256f04ee0b55ac5276bbf3ac61392c3a3ce150bb5497b709803e17ce

    SHA512

    51c3b4f29781bb52c137ddb356e1bc5a37f3a25f0ed7d89416b14ed994121f884cb3e40ccdbb211a8989e3bd137b8df8b28e232f98de8f35b03965cfce4b424f

  • \Users\Admin\AppData\Local\Temp\_MEI18962\python312.dll

    Filesize

    6.6MB

    MD5

    5c5602cda7ab8418420f223366fff5db

    SHA1

    52f81ee0aef9b6906f7751fd2bbd4953e3f3b798

    SHA256

    e7890e38256f04ee0b55ac5276bbf3ac61392c3a3ce150bb5497b709803e17ce

    SHA512

    51c3b4f29781bb52c137ddb356e1bc5a37f3a25f0ed7d89416b14ed994121f884cb3e40ccdbb211a8989e3bd137b8df8b28e232f98de8f35b03965cfce4b424f