Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    24/12/2023, 22:05

General

  • Target

    1481a53337d9bdc8412d8b3cc31a2dd9.exe

  • Size

    285KB

  • MD5

    1481a53337d9bdc8412d8b3cc31a2dd9

  • SHA1

    12447fc7e32d18d355b9c60209a4b10cc0e33423

  • SHA256

    3ca32fe2dd00db5c5ee788bc720373f965eb33ca5925ddb00d02ccdedba43d29

  • SHA512

    b5980a9735f80b2c1275a961875627e32396c707042c4a6d6fc56dfa4310161ab0ca29375dcccf1fecd75c4ffa44e7a0daa0d8d8095c96659ab2c2e9bd6e12b0

  • SSDEEP

    3072:DmvggGQT7vgUqEtyJDDmUjehPhcIQqKYlNtrud19EjNgF3KwmwckP+0WFG7mPF:vgDYhnJDDmOeBzKYlO1f5NmwckP+Pw6

Score
6/10

Malware Config

Signatures

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Windows directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1481a53337d9bdc8412d8b3cc31a2dd9.exe
    "C:\Users\Admin\AppData\Local\Temp\1481a53337d9bdc8412d8b3cc31a2dd9.exe"
    1⤵
    • Drops file in Windows directory
    PID:2240

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2240-0-0x0000000000590000-0x00000000005D0000-memory.dmp

    Filesize

    256KB

  • memory/2240-2-0x0000000000510000-0x000000000053F000-memory.dmp

    Filesize

    188KB