Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
24/12/2023, 18:03
General
-
Target
0a5f0524256e174c89a5b042aee3db95.exe
-
Size
105KB
-
MD5
0a5f0524256e174c89a5b042aee3db95
-
SHA1
732426aab033ee27637d6cf351bc3fce49572533
-
SHA256
cf88ac1179baa08af510960cd85d998673ee45891bfb2dc4eb20555c5a8104c0
-
SHA512
f901149482507b68801afba13b9eac1ba96d0a23f32754d74669235f7693ea1144d6c631840a27bd791eabaa15f9356ce288d085a1d773a03d66754e5f019d8b
-
SSDEEP
3072:Cs/zt8dHEOwnbiinLU/UCxOcxW5pvpW9i:ZuwnbHoxOcczvY4
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0a5f0524256e174c89a5b042aee3db95.exe"C:\Users\Admin\AppData\Local\Temp\0a5f0524256e174c89a5b042aee3db95.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\0a5f0524256e174c89a5b042aee3db95.exeC:\Users\Admin\AppData\Local\Temp\0a5f0524256e174c89a5b042aee3db95.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
105KB
MD52100e4f01a46f42591af0038a2854c65
SHA1a268d82b1aec5f694d24384eba96446eb17f7189
SHA25655cf64509e866ab74df1639acabbd08c92083c745e017274c1108304c50f80cb
SHA512bc0682aecf0374b52c24fe17a032aabb57910f31fda5a112e3866633cbbc55acee7bddb4c4363de83ebf2af0fc4d33854f634f4b2a0277201b252c8a6232eeab
-
Filesize
188KB
-
Filesize
56KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
108KB