Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    24/12/2023, 17:11

General

  • Target

    07aec06ee735dda73c12f33ddd46e829.exe

  • Size

    730KB

  • MD5

    07aec06ee735dda73c12f33ddd46e829

  • SHA1

    a11a1ab8d717fab01c6c465b6e3b8d9294318053

  • SHA256

    863ecab84ed07995d7f32a59b423ddd9290199f7542e2ea95231f39f66d68aea

  • SHA512

    140fb93369edc95eec34654537ffeee0d337d6a64ea32d269c4d4823fc5b4ed3ec3e12d416c7e77a6193533f4f382c5ef7bc6fbacda72952a8c60e8868fb321d

  • SSDEEP

    12288:36SKqT31T6WpJY6V765jKqostkm3eGkb8TnNi6YW7PweGb:qxqT31T6WE6I5jKqosOmHkb4om7PweGb

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • AutoIT Executable 2 IoCs

    AutoIT scripts compiled to PE executables.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\07aec06ee735dda73c12f33ddd46e829.exe
    "C:\Users\Admin\AppData\Local\Temp\07aec06ee735dda73c12f33ddd46e829.exe"
    1⤵
      PID:2752

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2752-0-0x0000000000400000-0x00000000004A0000-memory.dmp

      Filesize

      640KB

    • memory/2752-1-0x0000000000400000-0x00000000004A0000-memory.dmp

      Filesize

      640KB