Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

0929bb6a57...0b.exe

windows7-x64

1

0929bb6a57...0b.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    148s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    24/12/2023, 17:44

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    0929bb6a57c1c5c382b09d4275f5d00b.exe

  • Size

    116KB

  • MD5

    0929bb6a57c1c5c382b09d4275f5d00b

  • SHA1

    04641e94a774af9274741672c5c01b2a620696e6

  • SHA256

    7de0e07990cd241f8c9469b3daa6e666a1bc54cb9783ef5bd26f02c01b6316c3

  • SHA512

    9d8897e7731822e6d876a4099dede4b6a1af0c24ef3b96be7dc3dd1e60dc883663b7f481a0296a56b8698948b1ef8c5e96fc2e439486cd8b5a5450de5b298043

  • SSDEEP

    3072:cVXgryXWDW6HVRhcLyhRh8mLXyiloJda:cdgPqIjhr3fyY

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\0929bb6a57c1c5c382b09d4275f5d00b.exe
    "C:\Users\Admin\AppData\Local\Temp\0929bb6a57c1c5c382b09d4275f5d00b.exe"
    1⤵
      PID:1688
    • C:\Windows\SysWOW64\setups.bak
      "C:\Windows\system32\setups.bak" *C:\Users\Admin\AppData\Local\Temp\0929bb6a57c1c5c382b09d4275f5d00b.exe
      1⤵
        PID:2412
      • C:\Windows\SysWOW64\setups.bak
        "C:\Windows\system32\setups.bak" *C:\Windows\SysWOW64\setups.bak
        1⤵
          PID:2828
        • C:\Windows\SysWOW64\setups.bak
          "C:\Windows\system32\setups.bak" *C:\Windows\SysWOW64\setups.bak
          1⤵
            PID:2704
          • C:\Windows\SysWOW64\setups.bak
            "C:\Windows\system32\setups.bak" *C:\Windows\SysWOW64\setups.bak
            1⤵
              PID:1228
            • C:\Windows\SysWOW64\setups.bak
              "C:\Windows\system32\setups.bak" *C:\Windows\SysWOW64\setups.bak
              1⤵
                PID:1344
              • C:\Windows\SysWOW64\setups.bak
                "C:\Windows\system32\setups.bak" *C:\Windows\SysWOW64\setups.bak
                1⤵
                  PID:3052
                • C:\Windows\SysWOW64\setups.bak
                  "C:\Windows\system32\setups.bak" *C:\Windows\SysWOW64\setups.bak
                  1⤵
                    PID:1720
                  • C:\Windows\SysWOW64\setups.bak
                    "C:\Windows\system32\setups.bak" *C:\Windows\SysWOW64\setups.bak
                    1⤵
                      PID:2308
                    • C:\Windows\SysWOW64\setups.bak
                      "C:\Windows\system32\setups.bak" *C:\Windows\SysWOW64\setups.bak
                      1⤵
                        PID:2800
                      • C:\Windows\SysWOW64\setups.bak
                        "C:\Windows\system32\setups.bak" *C:\Windows\SysWOW64\setups.bak
                        1⤵
                          PID:3024
                        • C:\Windows\SysWOW64\setups.bak
                          "C:\Windows\system32\setups.bak" *C:\Windows\SysWOW64\setups.bak
                          1⤵
                            PID:2020
                          • C:\Windows\SysWOW64\setups.bak
                            "C:\Windows\system32\setups.bak" *C:\Windows\SysWOW64\setups.bak
                            1⤵
                              PID:1588
                            • C:\Windows\SysWOW64\setups.bak
                              "C:\Windows\system32\setups.bak" *C:\Windows\SysWOW64\setups.bak
                              1⤵
                                PID:1076
                              • C:\Windows\SysWOW64\setups.bak
                                "C:\Windows\system32\setups.bak" *C:\Windows\SysWOW64\setups.bak
                                1⤵
                                  PID:2120
                                • C:\Windows\SysWOW64\setups.bak
                                  "C:\Windows\system32\setups.bak" *C:\Windows\SysWOW64\setups.bak
                                  1⤵
                                    PID:848
                                  • C:\Windows\SysWOW64\setups.bak
                                    "C:\Windows\system32\setups.bak" *C:\Windows\SysWOW64\setups.bak
                                    1⤵
                                      PID:2644
                                    • C:\Windows\SysWOW64\setups.bak
                                      "C:\Windows\system32\setups.bak" *C:\Windows\SysWOW64\setups.bak
                                      1⤵
                                        PID:2412
                                      • C:\Windows\SysWOW64\setups.bak
                                        "C:\Windows\system32\setups.bak" *C:\Windows\SysWOW64\setups.bak
                                        1⤵
                                          PID:1624
                                        • C:\Windows\SysWOW64\setups.bak
                                          "C:\Windows\system32\setups.bak" *C:\Windows\SysWOW64\setups.bak
                                          1⤵
                                            PID:2136
                                          • C:\Windows\SysWOW64\setups.bak
                                            "C:\Windows\system32\setups.bak" *C:\Windows\SysWOW64\setups.bak
                                            1⤵
                                              PID:1336
                                            • C:\Windows\SysWOW64\setups.bak
                                              "C:\Windows\system32\setups.bak" *C:\Windows\SysWOW64\setups.bak
                                              1⤵
                                                PID:2484
                                              • C:\Windows\SysWOW64\setups.bak
                                                "C:\Windows\system32\setups.bak" *C:\Windows\SysWOW64\setups.bak
                                                1⤵
                                                  PID:2944
                                                  • C:\Windows\SysWOW64\setups.bak
                                                    "C:\Windows\system32\setups.bak" *C:\Windows\SysWOW64\setups.bak
                                                    2⤵
                                                      PID:2132
                                                  • C:\Windows\SysWOW64\setups.bak
                                                    "C:\Windows\system32\setups.bak" *C:\Windows\SysWOW64\setups.bak
                                                    1⤵
                                                      PID:652
                                                    • C:\Windows\SysWOW64\setups.bak
                                                      "C:\Windows\system32\setups.bak" *C:\Windows\SysWOW64\setups.bak
                                                      1⤵
                                                        PID:2656
                                                      • C:\Windows\SysWOW64\setups.bak
                                                        "C:\Windows\system32\setups.bak" *C:\Windows\SysWOW64\setups.bak
                                                        1⤵
                                                          PID:1756
                                                        • C:\Windows\SysWOW64\setups.bak
                                                          "C:\Windows\system32\setups.bak" *C:\Windows\SysWOW64\setups.bak
                                                          1⤵
                                                            PID:2004
                                                          • C:\Windows\SysWOW64\setups.bak
                                                            "C:\Windows\system32\setups.bak" *C:\Windows\SysWOW64\setups.bak
                                                            1⤵
                                                              PID:880
                                                            • C:\Windows\SysWOW64\setups.bak
                                                              "C:\Windows\system32\setups.bak" *C:\Windows\SysWOW64\setups.bak
                                                              1⤵
                                                                PID:3004
                                                              • C:\Windows\SysWOW64\setups.bak
                                                                "C:\Windows\system32\setups.bak" *C:\Windows\SysWOW64\setups.bak
                                                                1⤵
                                                                  PID:1744
                                                                • C:\Windows\SysWOW64\setups.bak
                                                                  "C:\Windows\system32\setups.bak" *C:\Windows\SysWOW64\setups.bak
                                                                  1⤵
                                                                    PID:844
                                                                  • C:\Windows\SysWOW64\setups.bak
                                                                    "C:\Windows\system32\setups.bak" *C:\Windows\SysWOW64\setups.bak
                                                                    1⤵
                                                                      PID:1756
                                                                    • C:\Windows\SysWOW64\setups.bak
                                                                      "C:\Windows\system32\setups.bak" *C:\Windows\SysWOW64\setups.bak
                                                                      1⤵
                                                                        PID:2476
                                                                      • C:\Windows\SysWOW64\setups.bak
                                                                        "C:\Windows\system32\setups.bak" *C:\Windows\SysWOW64\setups.bak
                                                                        1⤵
                                                                          PID:2588

                                                                        Network

                                                                        MITRE ATT&CK Matrix

                                                                        Replay Monitor

                                                                        Loading Replay Monitor...

                                                                        Downloads

                                                                        • C:\Windows\SysWOW64\setups.bak
                                                                          Filesize

                                                                          69KB

                                                                          MD5

                                                                          ce41fbb85fdce155b8002155b80178b0

                                                                          SHA1

                                                                          4ed97b1b2bc6ddc44c913c2561ce3b30fcb3f527

                                                                          SHA256

                                                                          e9577447bcb2d482039d173797905e5078109c7fcc51c15d09cff882983efe14

                                                                          SHA512

                                                                          89f2173af531676b48cad280f91afd365654fdd6feaed6fb82fdb15ba921a6a43172bb2b554e7b58ce1d2892757e16c926fd0e20b9ad7a99d3008a62371fd2eb

                                                                          Download Submit

                                                                        • C:\Windows\SysWOW64\setups.bak
                                                                          Filesize

                                                                          74KB

                                                                          MD5

                                                                          284496dcfe1adaf9b9e32f0a5a489fcd

                                                                          SHA1

                                                                          f50d6f35e76ce058679f494be8c091de7a17fbd4

                                                                          SHA256

                                                                          3c3a104fd63dda31fb7eb1ce595637185cd6194d15541c781515f85690036247

                                                                          SHA512

                                                                          0dd543008a49f14f1c51dbacedb269f272aeaac646a33a886f42950df51ee4f05a1924e9ef32188293eabfce49007289a1869d980fb22053658f2a18e4d035eb

                                                                          Download Submit

                                                                        • C:\Windows\SysWOW64\setups.bak
                                                                          Filesize

                                                                          7KB

                                                                          MD5

                                                                          67aa9793be8c27215376a8bdad79e68b

                                                                          SHA1

                                                                          11b6097e1212a6f10629b2557ee559bad4308634

                                                                          SHA256

                                                                          3d17825c052cae1ebafd50c436bbe605cc700510b5f2153cd4fa75c073b86a57

                                                                          SHA512

                                                                          ef6e21d1f1061f3bb73611b9bf777712013419d26cc93b7539a5cc0fd6abeb242e40ba28501d237bb8e035612b0aca92b4e16801511c0c14418c1effacb4c7d2

                                                                          Download Submit

                                                                        • C:\Windows\SysWOW64\setups.bak
                                                                          Filesize

                                                                          9KB

                                                                          MD5

                                                                          1da1fee7b99458525ceec482b02b376b

                                                                          SHA1

                                                                          453878ca5e8e0595d1877aa1297abd80913f2873

                                                                          SHA256

                                                                          5cc57b8a266f1dcd8a99bd754eb1e39c3c264e3ebf8372b8da8f2e20d3bdf9df

                                                                          SHA512

                                                                          e63fcbfb4260947ccc899959b06935ddd20812c694fd0cbd0608ff084e1946b879f512e627225ca38fa6ce6a512618ec5e620c3dafe57e7e66e909d2688065d5

                                                                          Download Submit

                                                                        • \Windows\SysWOW64\setups.bak
                                                                          Filesize

                                                                          64KB

                                                                          MD5

                                                                          076b5430c7998600d3754b72645e3dcb

                                                                          SHA1

                                                                          3e591400e1c62f6045e18eb73f7b8350b709decf

                                                                          SHA256

                                                                          6665aac6127693beb892d03c5acae791b0f246a4205962e47cc1f96e22eeab8c

                                                                          SHA512

                                                                          b9033248d24f1960adcd3b28b1c662c590fd35a9b7e0891cfe9fdd652ce6f9b5b238a12a10f25d7a183dd324de1de7d5f13049b446d0930958db1a4471d19457

                                                                          Download Submit

                                                                        • memory/920-130-0x0000000000400000-0x0000000000425000-memory.dmp

                                                                          Filesize

                                                                          148KB

                                                                          Download

                                                                        • memory/952-106-0x0000000000400000-0x0000000000425000-memory.dmp

                                                                          Filesize

                                                                          148KB

                                                                          Download

                                                                        • memory/1228-118-0x0000000000400000-0x0000000000425000-memory.dmp

                                                                          Filesize

                                                                          148KB

                                                                          Download

                                                                        • memory/1240-110-0x0000000000400000-0x0000000000425000-memory.dmp

                                                                          Filesize

                                                                          148KB

                                                                          Download

                                                                        • memory/1612-117-0x0000000000400000-0x0000000000425000-memory.dmp

                                                                          Filesize

                                                                          148KB

                                                                          Download

                                                                        • memory/1696-120-0x0000000000400000-0x0000000000425000-memory.dmp

                                                                          Filesize

                                                                          148KB

                                                                          Download

                                                                        • memory/2072-111-0x0000000000400000-0x0000000000425000-memory.dmp

                                                                          Filesize

                                                                          148KB

                                                                          Download

                                                                        • memory/2132-70-0x0000000000400000-0x0000000000425000-memory.dmp

                                                                          Filesize

                                                                          148KB

                                                                          Download

                                                                        • memory/2488-58-0x0000000000400000-0x0000000000425000-memory.dmp

                                                                          Filesize

                                                                          148KB

                                                                          Download

                                                                        • memory/2568-88-0x0000000000400000-0x0000000000425000-memory.dmp

                                                                          Filesize

                                                                          148KB

                                                                          Download

                                                                        • memory/2708-84-0x0000000000400000-0x0000000000425000-memory.dmp

                                                                          Filesize

                                                                          148KB

                                                                          Download

                                                                        • memory/2936-21-0x0000000000400000-0x0000000000425000-memory.dmp

                                                                          Filesize

                                                                          148KB

                                                                          Download