Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
1563s -
max time network
1563s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
16/12/2023, 14:34
Behavioral task
behavioral1
Sample
main.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
main.exe
Resource
win10v2004-20231215-en
General
-
Target
main.exe
-
Size
17.7MB
-
MD5
04401eef109c1534d39ba27a26270c0b
-
SHA1
feca6ba30271ee0b262f52c13cf19221c3cb2ede
-
SHA256
63fd4b96f40a3e14c7c75f0c86bff300f3ebdab56290c444dc72dad40183b68a
-
SHA512
e7d56cca62b1aa8fa2aa3584b67b3f2fa90f1268bf032083415783d91b22b13bad0554092da09c890ba86af7cabd8436314db71c275a86e9fe7be64e688c3414
-
SSDEEP
393216:4qPnLFXlr8gQpDOETgsvfGMwegF6u7vEbKtiLRq:pPLFXNlQoEDY6fsQk
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 2872 main.exe -
resource yara_rule behavioral1/files/0x0005000000018692-111.dat upx -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 2540 wrote to memory of 2872 2540 main.exe 28 PID 2540 wrote to memory of 2872 2540 main.exe 28 PID 2540 wrote to memory of 2872 2540 main.exe 28
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.4MB
MD569d4f13fbaeee9b551c2d9a4a94d4458
SHA169540d8dfc0ee299a7ff6585018c7db0662aa629
SHA256801317463bd116e603878c7c106093ba7db2bece11e691793e93065223fc7046
SHA5128e632f141daf44bc470f8ee677c6f0fdcbcacbfce1472d928576bf7b9f91d6b76639d18e386d5e1c97e538a8fe19dd2d22ea47ae1acf138a0925e3c6dd156378