Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    22/12/2023, 13:36

General

  • Target

    a75c63df5a85cbe3ed17100502e1404f.exe

  • Size

    282KB

  • MD5

    a75c63df5a85cbe3ed17100502e1404f

  • SHA1

    a7ebcc4ac85a9836150b51942ecf1660a91f222b

  • SHA256

    acd36607aaf800a81f8c7473852d0c414b793d1f3babef3624f9819fe56c1735

  • SHA512

    208df4b0fe90c45e092a8b1cc80735dd8200cb04e7db1814353216d21d658d54e04796d82292e7a038d747260fb155b29ca54c55b2a79709530164e618c8dbca

  • SSDEEP

    3072:ygV7qR3tGXRvjxCb5NgXDY7uSlkJcUa7kYQTcqW2NdQQGH/UDhSCUc4aqTBF91gP:L1XlKgzelZNQSBQGH/CSpWqTImQ

Score
6/10

Malware Config

Signatures

  • Enumerates connected drives 3 TTPs 10 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in Program Files directory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\a75c63df5a85cbe3ed17100502e1404f.exe
    "C:\Users\Admin\AppData\Local\Temp\a75c63df5a85cbe3ed17100502e1404f.exe"
    1⤵
    • Enumerates connected drives
    • Drops file in Program Files directory
    PID:1960

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Program Files\7-Zip\7z.cab

    Filesize

    135KB

    MD5

    07d6a493d529fe72922b4ae4480f3d91

    SHA1

    ddbf64fcd7ea6cb1d2a00f0aa7663c003a468fec

    SHA256

    bb965ff87b005dba9c6bc121ae0e700eb2d81e42a3e52f6f3e46789376351b18

    SHA512

    38a9c21236225aaf2224937721707a3f76e37cbae830402de8cb2d805fc09d794902693720a7265106a574ad75aa5f22f20afb6b1f7bfa31acfb94037ffed64a

  • C:\Program Files\7-Zip\7zFM.cab

    Filesize

    52KB

    MD5

    013470b20e4107278e4c1ef0a3c226a1

    SHA1

    2047debfd83aad4fba85372fbd5e52e6cec73af7

    SHA256

    4967a24271843e5ca87fe93a80b236d8e926b9c6334b216ccc0c56d7d8ff219d

    SHA512

    64bfccacfb62b1dc2e82ae5d5ed1592adf120430182a287f2f6f97b3bef32f4c7c6a8c5d291fac615502b4471bf4c2577b7785e73e01a50c35d728d6c045f6eb

  • C:\Program Files\7-Zip\RCX6E.tmp

    Filesize

    123KB

    MD5

    3d50d380661890b633c48ef3ddf3caad

    SHA1

    be7ace700536f4f5432b120b7f72e3b47324f9a0

    SHA256

    b9350163e7594ac1e736fb5458aab7a2cf07e523d67fc03ee434c8099c1dbe71

    SHA512

    b47aa722baf88540ad2f20ce533d31e9fa95f24360f2bd9be79eb7c98ee3723e07b6a41fbef3c6e2109e996ec774d84217a6f6516ad8eacd5bb560ec49b095c9

  • C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLED.cab

    Filesize

    96KB

    MD5

    bff2df8a9384a770b22bcecf8be46197

    SHA1

    cf473ffad3791185206d6a245d4c1e9b343d88dc

    SHA256

    4c9edc4a89fc2a6db83ae06f8fee26b5b4ae4a650d18a1cb54d74d1b545f9dba

    SHA512

    ada14f22b7257997acea58c63df1d345f872a50bb7e5210afd85a24225360efd28ff0ff64e39b718dff8ac4af4228cf4d1a17cf8193702d51c63008eee0becdb

  • C:\Program Files\Google\Chrome\Application\106.0.5249.119\Installer\RCX178.tmp

    Filesize

    107KB

    MD5

    94532920be135ecd08ddfa232502aff3

    SHA1

    b706459456e12bb4cde9d2bfaaea9cc2102b4712

    SHA256

    9bee6b1f22a46d2049619b09b27d1134cfc85bb11466ab73b28a2b05a941ab17

    SHA512

    3b87f3cf21738a1a328b7b1131cff7c59dbce6c2a4582628634d8b57e091b6b50725754d493e637166817bb87920aa4656e7cce300e34e1ec05e2ae10ae02c20

  • C:\Program Files\Google\Chrome\Application\106.0.5249.119\Installer\chrmstp.cab

    Filesize

    98KB

    MD5

    6523e92aea26d480c43a1ebd0fdf9fd9

    SHA1

    56808929e2f81522e9ac3da3e624d4d910905ce0

    SHA256

    96a75cec1a8e8188678101e43e83924d504329c931f69340179bc85f34a119be

    SHA512

    b34fda2cdf91bf9c1321978dc4477b1c90b51af9aec251f8f8783a72d9a79c8f98a79d1e02a4741272625ce7e57f7538f3c32ef4f5234d15009511afd53653c4

  • C:\Program Files\Google\Chrome\Application\106.0.5249.119\Installer\chrmstp.exe

    Filesize

    93KB

    MD5

    481069b30735db7c51a9c95e1da0a60b

    SHA1

    88768cdefbd233d2a79d88b053c1f38cae9240af

    SHA256

    c2cd4a9c37175a76d4e7c533acabfab762f10834577c5f23661a2f32183100f7

    SHA512

    1c78d0a0735edfaf67a4b72874d7dade06e93bf8a07ef41d0f85e058be9c88c40441ee50f8a8c029d27f741882f69e4851b646c4d234865dd1c55f0328e4e446

  • C:\Program Files\Google\Chrome\Application\106.0.5249.119\chrome_pwa_launcher.cab

    Filesize

    134KB

    MD5

    28bd098e1020c4422ace925d0d127ff4

    SHA1

    516173e8de7774d169ca7b95ca1edbd96ab6df40

    SHA256

    18fe5fc213ebc875a7b9c961f495105220c483c34d757bb353840d5da5e45085

    SHA512

    f6667e07d2098c4397253eb0415cc75e754c2a84c2f167d7a8e72de442403a693a9f58ec95c4ec186cbb8cd0ec9646fbfedf165acf498e70fb598465cade3619

  • C:\Program Files\Google\Chrome\Application\106.0.5249.119\chrome_pwa_launcher.exe

    Filesize

    25KB

    MD5

    a110a77edcece56c95c220395130ba1b

    SHA1

    46dc49befcd24dc37b4313900df6c0cfa86f8335

    SHA256

    4cbf3d66275219f55a1849cb4d663f0945a506828293a776b9dcf5b317cb79cc

    SHA512

    67e90d7f80a4179ec0663d7b0abe35cf7c89968cbe6c4d74f36ceb09268e21d38ea3ac8b17969bc21887744f0f5203ece125ac0906c34027803a5de37b9ed3d0

  • C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.cab

    Filesize

    37KB

    MD5

    9bd8a1c90729e1b174481b1a535a2d6e

    SHA1

    45a2f6f3426ddee4f219af3cb62a71c752504a5d

    SHA256

    1e964bf68b42be59401e20a427a2b279126c163bf236f83f36ba0ced4b24aabf

    SHA512

    66618a207d085fafa6d17fc12527839900419179abcb17b1db7aaffbed56d4c373004d0e5bb857bac44950ec43043e8e51cd12feb547c17fcd06c52b69e343ad

  • C:\Program Files\Google\Chrome\Application\RCXE8.tmp

    Filesize

    114KB

    MD5

    9405c5468f8f213583894cab53e6c473

    SHA1

    b51edf0dbd9a816855956e27b73191f433e7d13f

    SHA256

    474d94b6e23998df3b2884785569c0411017e04d1e52be78c5f4fd0557324fd8

    SHA512

    c77c8d0f52833da8c8073f89b66913858ec94b12affd2dd0e2272d0707ca8d92dd43348f95f4af6804d1cd72f88e47e5b05271f8f75816f2e6322c6d10b1911d

  • C:\Program Files\Google\Chrome\Application\chrome.cab

    Filesize

    126KB

    MD5

    e05281222f18b1023e60f0ab386e245a

    SHA1

    4025d1cdfc9a0428fb06e42c629d10ef4e676251

    SHA256

    8858c3c084207565e28de8e4bba9588c810e8a50470aa45a06a97868e0ec0bf4

    SHA512

    ec070ecd63acaab2535b9ce86d3825d0a4c5391f01678d483eb9d0fd7099129028edec7cdfe16632f8bb6e4dc4e66cd367d70f90c5adff184f493361158ee80d

  • C:\Program Files\Google\Chrome\Application\chrome_proxy.cab

    Filesize

    72KB

    MD5

    623010e23e5cefeb5419fc37974c927f

    SHA1

    17e444a7f0eb372d94b5ab2f3666da782e3eee78

    SHA256

    fce9a0a1eb843d94518a8f74ea94512ad3f47162347b5fc85555912a7f09b3ac

    SHA512

    38220dcf10a5be018a85a2ace6a14c3f5c8e19f63f9b8ffe2c52d7c9bce2ff462a6f41fcc8ae6038a18837b2abe38dc4502c7d630112643318dbb769d397b552

  • C:\Program Files\Java\jdk1.7.0_80\bin\appletviewer.cab

    Filesize

    15KB

    MD5

    c9aaf1247944e0928d6a7eae35e8cdc4

    SHA1

    af91d57336d495bb220d8f72dcf59f34f5998fd3

    SHA256

    05b153ba07dc1a262fb1013d42bfc24d9000ce607f07d227593c975cdf0bb25b

    SHA512

    bf3bc64135810948626105a8f76dc4439e68ee531f20d901c3082ae2155f2ea35f34d408de44b46ede61ded832fcc61ac1cb9719e432f0f07b49479c95847e51

  • C:\Program Files\Java\jdk1.7.0_80\bin\apt.cab

    Filesize

    15KB

    MD5

    407d2d7dab36cdea871d4c6b9c62b258

    SHA1

    86cd158ad810c6772c22a5799c7acf4b9d7c9f57

    SHA256

    3c040679ea4be0cc5ca20c9f24caf6c13d3002560347e7446dc963b611523bd9

    SHA512

    dcdb53a3ca2a3637216a9d8133d1dbda336a6d3a98c6b956af42f94adbc136dc5a0245e87512d0314f23dbf3cab4900bc40ac13c79ee93a677d93a89e0cd9e17

  • C:\Program Files\Java\jre7\bin\jabswitch.cab

    Filesize

    25KB

    MD5

    18c971b21932ed4f8b5a6f1853e3cc80

    SHA1

    607430646e69e32ed1b6eca3d473c2c8ca6d651a

    SHA256

    bb96dee4cadef33d2c2ece40de71da5701560c8481a08edbae791c830f99fa26

    SHA512

    aa10a40ca97d869bd7855a70e3aeea53c232aeaf4e4f0cfe73897882fafc20ec1ae9fa90b5a0b1fbf84ed87bbcb8a576a46f722983800c619dbee7149ee9257d

  • C:\Program Files\Java\jre7\bin\java-rmi.cab

    Filesize

    15KB

    MD5

    d3827115574d8b0ecbaeb03528c6d1a4

    SHA1

    2733607537ffc00e038039af7eba24601db6fbeb

    SHA256

    6ad5b065b3f612d89127b89033aaaff995942187f917144dbe28e656c3ba348f

    SHA512

    2a1f131960f452d1012a43597f2ac9df0edc22b6aa68fd52eabf4a4249d86c7776d625e00e7c5dbd4f35add9e31cbc02674be40714f9aa5f3a2f458419303c18

  • C:\Program Files\Microsoft Games\Chess\Chess.cab

    Filesize

    45KB

    MD5

    1378f799ec715f01af733886a38877e8

    SHA1

    fb66bb36f0f6c0bdb4876afd1baaf228a853ad61

    SHA256

    be1ed4fb383a3e0c6ea3981c3428e93f49edef1dcc17b39e74941df1a7d3a8cf

    SHA512

    07f5875d18c81a9c5a30fc97c461d342417435a59cc600a10a6999c70078ceea6616e4de7941c8c31d7860781b0d491ca8301a42fd7f84bcccba68b9f0099b4f

  • C:\Program Files\Microsoft Games\Chess\Chess.exe

    Filesize

    57KB

    MD5

    0bd768d52194bebe2412b00ccdf5b242

    SHA1

    0632acf120d811b7b9f40cec88e0ba53ac08fcfe

    SHA256

    cdd5989a9f0eb46eba76d4c350d0445f1ac4f56b747f8660058aca5af1b21fe8

    SHA512

    d280dbab7461738e97e8f68970e10d36770a42e6382cc98d2b9c6c187a77a5425d3012aa7dc01b7706f43f52606eb1be13c88263c10fdd7867049978eb8babb9

  • C:\Program Files\Microsoft Office\Office14\MSOHTMED.EXE

    Filesize

    99KB

    MD5

    35d24bd295fef1b266e3fd2addfc6307

    SHA1

    03d2ce3164edc0f9101e07147767e2e9f178470e

    SHA256

    e309404699e103b4382d20747fab557355dd1ca615fff8e891df69146bd29bda

    SHA512

    4d247c46b4d5ec580e3724d1f5674fe7aa2d059332b51e9b07077daa4cc423659d13bdb1c68a82ee5ea3a7054ffd49725e35b8cf7d02840e8945842c4c133bba

  • C:\Program Files\Microsoft Office\Office14\MSOHTMED.cab

    Filesize

    79KB

    MD5

    aeebd9518fe8ee38d7a03d8066d335af

    SHA1

    9d82fe74ab8434cf299056afd80919d34069ad30

    SHA256

    98880e7d8215da76bde46ea451fb313877cb4fa27837765c93d64c2af7160e0e

    SHA512

    ae7f6a0ca13c150f2a05ad1961578ab7e7b358e82770eef1bf2ec286bda24f08c902f3f950c3402d86d24d9fa0209d8eef2f831b0f431b2b97510cf7a12e7a84

  • C:\Program Files\Mozilla Firefox\crashreporter.cab

    Filesize

    60KB

    MD5

    d81a9fa7f872da3bb10ae8024b8db744

    SHA1

    62e83732f0c077a0cdbcd35746093d6a39dd036b

    SHA256

    0c71a1fee35285a0bbf0d85ef587deb1c410a994e12107c59f74890649eeb058

    SHA512

    527b6922594c70e0fe2ba476bdf271c1819843a7d341e6675510e831fa2dd6879d02d907b881cbd1bb8df73aae8095a8b84f2db53e6898c1e948ed55e2558415

  • C:\Program Files\Mozilla Firefox\crashreporter.exe

    Filesize

    15KB

    MD5

    6bb9408f423573ebb9bbc95096efc20d

    SHA1

    8c711d732a0743bd32c3a5d91ebb83320833c57d

    SHA256

    2a56fcc03db62c2f04912e81957c385a5f12a5a8bd8d3247650e69811f68a53d

    SHA512

    578ca5e79a05c90190e249d2c66a4a1f5de7b716e37a09cb8b3e66a8f702f98760c15474fb3db33d1f8d706dc6df2ffc74f364323527c0468294372d0c7fb813

  • C:\Program Files\Mozilla Firefox\default-browser-agent.cab

    Filesize

    78KB

    MD5

    ad0cb30fc48e3910ebe9a4ada114a2ed

    SHA1

    bf46441aafef147210a68caf3a6528b3dd9730e0

    SHA256

    5c72b706bb66c2b94d9e072b16547649958c08e498f5e45cdf9945f2cf0a19cd

    SHA512

    e6687278d55fdc6cdd88b97862378f4adfe3486bdd71aa5cbb5755ccc743cf75527ec9c484858332f4b1f8900faa31bb3a0fcf3a12364ef7923ad99c1a65d1b7

  • C:\Program Files\Mozilla Firefox\uninstall\helper.cab

    Filesize

    75KB

    MD5

    a2215ba4eff63127892ec7c2d37c2543

    SHA1

    9345b3b1f2417ad30f82306442a132a01412eec4

    SHA256

    0439e3f66337a30a162d9bcbcfc1dd132dc39e936a8cf150712fd2f0f76f2012

    SHA512

    52e01d8e4020d15f09d240ff5a6ce9ec3c809f3935b09150916f195995a72e74efc58fd820521b989b49005b0a84ad27aa65d6019773f4bae48e641f195c0648

  • C:\Program Files\VideoLAN\VLC\uninstall.cab

    Filesize

    62KB

    MD5

    21a184f21683ed18e2336a0a19b43819

    SHA1

    58ba6085e90d5edaaf215e2f127addf47ce672e4

    SHA256

    cd508eb8cebdbe01ce38e14b8897b93d8fccf33fdebdfe807cb4b2becbf8b04c

    SHA512

    fd963647ad0fd35d64722c421d5b459af57a5b48b691c15cda058f8428f226e9dbf438cb83de2ddc64ad91b41280d4d16faaf4b68d479f3a979bc81a7f5397f6

  • C:\Program Files\VideoLAN\VLC\uninstall.exe

    Filesize

    124KB

    MD5

    a35ec3d19f00f73e9e87c0c45718355c

    SHA1

    1f988271dc34ed38bfa5389c66214877568a4d12

    SHA256

    6c412ff0fbe0e8ad08a18187c8bcc1e1546b15c00a37f02fd29467a4e89f7cbc

    SHA512

    9859127c1cd31b0fa4edf95ab64dc71307994b16bc3799cc6c3b2cc91f37774eee9b21759779d78a15f63a03dffaf4a5df4f7d7f07379766b83a1e7cc3329961

  • C:\Program Files\VideoLAN\VLC\vlc-cache-gen.cab

    Filesize

    60KB

    MD5

    ee57284dfe76ad07237922e26177abc1

    SHA1

    cc29abb48f8c7e9154907e970d0709beaed82bc7

    SHA256

    b9581fc2c51c743d70beb2ec07ec0d65242a49835cdf55f54e88206c3e62e6f6

    SHA512

    3f1f7033a9697c6452b6cba5eccce42db49b52c072bc3f395d78c8aeacc80b2706aa0de3dc384dc81ed3fd8394b02d8e2225bbb0293bfe6a0b9c63cb036bbf2a