Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
1201s -
max time network
1220s -
platform
windows7_x64 -
resource
win7-20231023-en -
resource tags
-
submitted
16/11/2023, 21:44
General
-
Target
EJJU4554FacURVGtu7241raQGKE75657283.exe
-
Size
122.5MB
-
MD5
fa50909ae6f2371353eaa943ee7e4801
-
SHA1
5f6b71f06802866b4725a20c9023dfd430f2ee80
-
SHA256
3ff3d891aa19bbece7a89637f05009cf8f3c0663a9d54d6f08fa63ffc742b74a
-
SHA512
84170f600e1c4611b4656ab15d2bcd1d43225d9f8dde9f0326c56e97349634a7e3a79bfd5212a36cd84502817fa66992ac393fa5e22be76683484737273d8edf
-
SSDEEP
98304:jg3h79INSz4zmf5+H+V9fj5uAhO5qdH5R5Fb:8R7mCMtAgMdH5n
Score
6/10
Malware Config
Signatures
-
Looks up external IP address via web service 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 4 IoCs
-
Suspicious behavior: EnumeratesProcesses 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\EJJU4554FacURVGtu7241raQGKE75657283.exe"C:\Users\Admin\AppData\Local\Temp\EJJU4554FacURVGtu7241raQGKE75657283.exe"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
16.0MB
-
Filesize
4KB
-
Filesize
16.0MB
-
Filesize
16.0MB
-
Filesize
16.0MB