Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
24/12/2023, 14:30
General
-
Target
0107d79ab0d238b9448226d7a72b5ca0.exe
-
Size
84KB
-
MD5
0107d79ab0d238b9448226d7a72b5ca0
-
SHA1
810525cd2aed2b1a156d062daafd234ef8c4ddaa
-
SHA256
79d41dc3b1a7b48e03b04193f52d5eafa3e090661f2539e7b484a9f0eba4b9ed
-
SHA512
23db01b338b8e5f838c3951b48fc452ef3a5b7c436e572c3dce0027ea5679e69dc9889e3077441b4dbcc2b66e8783dfdd1360fbb945d7cc49a8cb838558d075b
-
SSDEEP
1536:cwym675Y7eb0yT6xFEQek31EdP07T/KV2FVnVJxwhTjevRjoNTwu9Hp12L9y1:UhQysSQx1O8nA2F7fwhTKp0N8CHpUxG
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0107d79ab0d238b9448226d7a72b5ca0.exe"C:\Users\Admin\AppData\Local\Temp\0107d79ab0d238b9448226d7a72b5ca0.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\0107d79ab0d238b9448226d7a72b5ca0.exeC:\Users\Admin\AppData\Local\Temp\0107d79ab0d238b9448226d7a72b5ca0.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
84KB
MD5f2315b446511234da055460a013faceb
SHA16527165e98a829905fe91e7b8bb24aa60a47e0b1
SHA256a4be04052124987dfbbabcfd7a28d71f48dfecc78370caa667f7bb5b9996a97c
SHA5127d3ba95eb9237670eb83728f0d07ecc6b6c7004f37d9766d4e1b6a31c6c55d7d6d58457ae3a226dabf32559f9a8bd4c60f7aa333828fc0eb2ea3e46c1146f588
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
56KB
-
Filesize
108KB