Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
24/12/2023, 17:44
Static task
static1
Behavioral task
behavioral1
Sample
0929bb6a57c1c5c382b09d4275f5d00b.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0929bb6a57c1c5c382b09d4275f5d00b.exe
Resource
win10v2004-20231215-en
General
-
Target
0929bb6a57c1c5c382b09d4275f5d00b.exe
-
Size
116KB
-
MD5
0929bb6a57c1c5c382b09d4275f5d00b
-
SHA1
04641e94a774af9274741672c5c01b2a620696e6
-
SHA256
7de0e07990cd241f8c9469b3daa6e666a1bc54cb9783ef5bd26f02c01b6316c3
-
SHA512
9d8897e7731822e6d876a4099dede4b6a1af0c24ef3b96be7dc3dd1e60dc883663b7f481a0296a56b8698948b1ef8c5e96fc2e439486cd8b5a5450de5b298043
-
SSDEEP
3072:cVXgryXWDW6HVRhcLyhRh8mLXyiloJda:cdgPqIjhr3fyY
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\0929bb6a57c1c5c382b09d4275f5d00b.exe"C:\Users\Admin\AppData\Local\Temp\0929bb6a57c1c5c382b09d4275f5d00b.exe"1⤵PID:1688
-
C:\Windows\SysWOW64\setups.bak"C:\Windows\system32\setups.bak" *C:\Users\Admin\AppData\Local\Temp\0929bb6a57c1c5c382b09d4275f5d00b.exe1⤵PID:2412
-
C:\Windows\SysWOW64\setups.bak"C:\Windows\system32\setups.bak" *C:\Windows\SysWOW64\setups.bak1⤵PID:2828
-
C:\Windows\SysWOW64\setups.bak"C:\Windows\system32\setups.bak" *C:\Windows\SysWOW64\setups.bak1⤵PID:2704
-
C:\Windows\SysWOW64\setups.bak"C:\Windows\system32\setups.bak" *C:\Windows\SysWOW64\setups.bak1⤵PID:1228
-
C:\Windows\SysWOW64\setups.bak"C:\Windows\system32\setups.bak" *C:\Windows\SysWOW64\setups.bak1⤵PID:1344
-
C:\Windows\SysWOW64\setups.bak"C:\Windows\system32\setups.bak" *C:\Windows\SysWOW64\setups.bak1⤵PID:3052
-
C:\Windows\SysWOW64\setups.bak"C:\Windows\system32\setups.bak" *C:\Windows\SysWOW64\setups.bak1⤵PID:1720
-
C:\Windows\SysWOW64\setups.bak"C:\Windows\system32\setups.bak" *C:\Windows\SysWOW64\setups.bak1⤵PID:2308
-
C:\Windows\SysWOW64\setups.bak"C:\Windows\system32\setups.bak" *C:\Windows\SysWOW64\setups.bak1⤵PID:2800
-
C:\Windows\SysWOW64\setups.bak"C:\Windows\system32\setups.bak" *C:\Windows\SysWOW64\setups.bak1⤵PID:3024
-
C:\Windows\SysWOW64\setups.bak"C:\Windows\system32\setups.bak" *C:\Windows\SysWOW64\setups.bak1⤵PID:2020
-
C:\Windows\SysWOW64\setups.bak"C:\Windows\system32\setups.bak" *C:\Windows\SysWOW64\setups.bak1⤵PID:1588
-
C:\Windows\SysWOW64\setups.bak"C:\Windows\system32\setups.bak" *C:\Windows\SysWOW64\setups.bak1⤵PID:1076
-
C:\Windows\SysWOW64\setups.bak"C:\Windows\system32\setups.bak" *C:\Windows\SysWOW64\setups.bak1⤵PID:2120
-
C:\Windows\SysWOW64\setups.bak"C:\Windows\system32\setups.bak" *C:\Windows\SysWOW64\setups.bak1⤵PID:848
-
C:\Windows\SysWOW64\setups.bak"C:\Windows\system32\setups.bak" *C:\Windows\SysWOW64\setups.bak1⤵PID:2644
-
C:\Windows\SysWOW64\setups.bak"C:\Windows\system32\setups.bak" *C:\Windows\SysWOW64\setups.bak1⤵PID:2412
-
C:\Windows\SysWOW64\setups.bak"C:\Windows\system32\setups.bak" *C:\Windows\SysWOW64\setups.bak1⤵PID:1624
-
C:\Windows\SysWOW64\setups.bak"C:\Windows\system32\setups.bak" *C:\Windows\SysWOW64\setups.bak1⤵PID:2136
-
C:\Windows\SysWOW64\setups.bak"C:\Windows\system32\setups.bak" *C:\Windows\SysWOW64\setups.bak1⤵PID:1336
-
C:\Windows\SysWOW64\setups.bak"C:\Windows\system32\setups.bak" *C:\Windows\SysWOW64\setups.bak1⤵PID:2484
-
C:\Windows\SysWOW64\setups.bak"C:\Windows\system32\setups.bak" *C:\Windows\SysWOW64\setups.bak1⤵PID:2944
-
C:\Windows\SysWOW64\setups.bak"C:\Windows\system32\setups.bak" *C:\Windows\SysWOW64\setups.bak2⤵PID:2132
-
-
C:\Windows\SysWOW64\setups.bak"C:\Windows\system32\setups.bak" *C:\Windows\SysWOW64\setups.bak1⤵PID:652
-
C:\Windows\SysWOW64\setups.bak"C:\Windows\system32\setups.bak" *C:\Windows\SysWOW64\setups.bak1⤵PID:2656
-
C:\Windows\SysWOW64\setups.bak"C:\Windows\system32\setups.bak" *C:\Windows\SysWOW64\setups.bak1⤵PID:1756
-
C:\Windows\SysWOW64\setups.bak"C:\Windows\system32\setups.bak" *C:\Windows\SysWOW64\setups.bak1⤵PID:2004
-
C:\Windows\SysWOW64\setups.bak"C:\Windows\system32\setups.bak" *C:\Windows\SysWOW64\setups.bak1⤵PID:880
-
C:\Windows\SysWOW64\setups.bak"C:\Windows\system32\setups.bak" *C:\Windows\SysWOW64\setups.bak1⤵PID:3004
-
C:\Windows\SysWOW64\setups.bak"C:\Windows\system32\setups.bak" *C:\Windows\SysWOW64\setups.bak1⤵PID:1744
-
C:\Windows\SysWOW64\setups.bak"C:\Windows\system32\setups.bak" *C:\Windows\SysWOW64\setups.bak1⤵PID:844
-
C:\Windows\SysWOW64\setups.bak"C:\Windows\system32\setups.bak" *C:\Windows\SysWOW64\setups.bak1⤵PID:1756
-
C:\Windows\SysWOW64\setups.bak"C:\Windows\system32\setups.bak" *C:\Windows\SysWOW64\setups.bak1⤵PID:2476
-
C:\Windows\SysWOW64\setups.bak"C:\Windows\system32\setups.bak" *C:\Windows\SysWOW64\setups.bak1⤵PID:2588
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
69KB
MD5ce41fbb85fdce155b8002155b80178b0
SHA14ed97b1b2bc6ddc44c913c2561ce3b30fcb3f527
SHA256e9577447bcb2d482039d173797905e5078109c7fcc51c15d09cff882983efe14
SHA51289f2173af531676b48cad280f91afd365654fdd6feaed6fb82fdb15ba921a6a43172bb2b554e7b58ce1d2892757e16c926fd0e20b9ad7a99d3008a62371fd2eb
-
Filesize
74KB
MD5284496dcfe1adaf9b9e32f0a5a489fcd
SHA1f50d6f35e76ce058679f494be8c091de7a17fbd4
SHA2563c3a104fd63dda31fb7eb1ce595637185cd6194d15541c781515f85690036247
SHA5120dd543008a49f14f1c51dbacedb269f272aeaac646a33a886f42950df51ee4f05a1924e9ef32188293eabfce49007289a1869d980fb22053658f2a18e4d035eb
-
Filesize
7KB
MD567aa9793be8c27215376a8bdad79e68b
SHA111b6097e1212a6f10629b2557ee559bad4308634
SHA2563d17825c052cae1ebafd50c436bbe605cc700510b5f2153cd4fa75c073b86a57
SHA512ef6e21d1f1061f3bb73611b9bf777712013419d26cc93b7539a5cc0fd6abeb242e40ba28501d237bb8e035612b0aca92b4e16801511c0c14418c1effacb4c7d2
-
Filesize
9KB
MD51da1fee7b99458525ceec482b02b376b
SHA1453878ca5e8e0595d1877aa1297abd80913f2873
SHA2565cc57b8a266f1dcd8a99bd754eb1e39c3c264e3ebf8372b8da8f2e20d3bdf9df
SHA512e63fcbfb4260947ccc899959b06935ddd20812c694fd0cbd0608ff084e1946b879f512e627225ca38fa6ce6a512618ec5e620c3dafe57e7e66e909d2688065d5
-
Filesize
64KB
MD5076b5430c7998600d3754b72645e3dcb
SHA13e591400e1c62f6045e18eb73f7b8350b709decf
SHA2566665aac6127693beb892d03c5acae791b0f246a4205962e47cc1f96e22eeab8c
SHA512b9033248d24f1960adcd3b28b1c662c590fd35a9b7e0891cfe9fdd652ce6f9b5b238a12a10f25d7a183dd324de1de7d5f13049b446d0930958db1a4471d19457