Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    22/12/2023, 10:22

General

  • Target

    84724f95d220080f05b25e828b62e3bc.exe

  • Size

    6.6MB

  • MD5

    84724f95d220080f05b25e828b62e3bc

  • SHA1

    5eda9d7b2f7d94f55f628cd69d4f5e807768b80e

  • SHA256

    fe94bca935e00894bd1f53bb36e1a980246bd80be782d410bd193663d2d6bdfe

  • SHA512

    6498c817eee23e9ba5310a6143a444047c44028df56ba005bc1a442250e247adf00fc89660f4e41ac38babea04457faae3be78ac30603d4fa52ad8a56aa13bba

  • SSDEEP

    98304:FDCoFt+b+sX1ZvbeAyJZ6L1IWlHNg2YYsI6CHMpV1Yq/EYbqUGUgLvqBQ2pLVZ:FtP+CsXDjDyf6L2WliXYrHW1LuLU97

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\84724f95d220080f05b25e828b62e3bc.exe
    "C:\Users\Admin\AppData\Local\Temp\84724f95d220080f05b25e828b62e3bc.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2980
    • C:\Users\Admin\AppData\Local\Temp\84724f95d220080f05b25e828b62e3bc.exe
      "C:\Users\Admin\AppData\Local\Temp\84724f95d220080f05b25e828b62e3bc.exe"
      2⤵
      • Loads dropped DLL
      PID:2720

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\_MEI29802\python39.dll

    Filesize

    4.3MB

    MD5

    1d5e4c20a20740f38f061bdf48aaca4f

    SHA1

    de1b64ab5219aa6fef95cd2b0ccead1c925fd0d0

    SHA256

    f8172151d11bcf934f2a7518cd0d834e3f079bd980391e9da147ce4cff72c366

    SHA512

    9df64c97e4e993e815fdaf7e8ecbc3ce32aa8d979f8f4f7a732b2efa636cfeb9a145fe2c2dcdf2e5e9247ee376625e1fdc62f9657e8007bb504336ac8d05a397