Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    24/12/2023, 17:11

General

  • Target

    07afe851e7d7d861a6915d634069330f.exe

  • Size

    1.8MB

  • MD5

    07afe851e7d7d861a6915d634069330f

  • SHA1

    84babc1253ddcf04ed35c93dce2aefec8095a19e

  • SHA256

    3ecc75bc438b90bf227dee2869aad5df858bdd6eab7f41b0af0b0b77b2091266

  • SHA512

    1a3317577be10702ddd08ef0cbf1865053a12c4d63f56d8fc19eb46922b3488855eca222ace17e9bb7f0b0b12cb45073cae9f1789721183f4ebd2c014ac0ec2d

  • SSDEEP

    24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7NxqUkHe:SCqm2Jpr0nNM7Dus7Nx2+

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 4 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Drops desktop.ini file(s) 9 IoCs
  • Drops file in Program Files directory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\07afe851e7d7d861a6915d634069330f.exe
    "C:\Users\Admin\AppData\Local\Temp\07afe851e7d7d861a6915d634069330f.exe"
    1⤵
    • Drops desktop.ini file(s)
    • Drops file in Program Files directory
    PID:828

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Program Files\7-Zip\7-zip32.dll.exe

    Filesize

    878KB

    MD5

    044b0b12af044a99a7b8d7400205765b

    SHA1

    ad668ff7cef552b4e48180f7d2d048b4c1ffb7ca

    SHA256

    aa6afe47fb5eef6b37ddb903c0be1b5c07d2d35f53c8e3cd16548409b7c423bd

    SHA512

    0624f658ca9ee6bceb17462458fd6179eeb493b9f9a1dd2f9c3d70837d744c3adac238d0efed8342b24b1dc48721ab1d48b330a1215c5ff8cabbd4628ca868bd

  • memory/828-0-0x0000000000400000-0x00000000005BA000-memory.dmp

    Filesize

    1.7MB

  • memory/828-705-0x0000000000400000-0x00000000005BA000-memory.dmp

    Filesize

    1.7MB

  • memory/828-9220-0x0000000000400000-0x00000000005BA000-memory.dmp

    Filesize

    1.7MB