Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

0cff7bfe12...2b.exe

windows7-x64

7

0cff7bfe12...2b.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    119s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    24/12/2023, 19:20

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    0cff7bfe12688f52881f3600d0d7172b.exe

  • Size

    295KB

  • MD5

    0cff7bfe12688f52881f3600d0d7172b

  • SHA1

    4c4f1d1bfa33a12b476798bde7be751c316688e9

  • SHA256

    c61e6d4ef33643a94a875e14ba739bd5461e27b63f67eaeb6dce6ff0e0f55a53

  • SHA512

    baec84869b2b37fd006c9b71983935e7dd1711ed4b22ff94f9aeeabaa4d1ef2dffbdea3ab85a90085551e2e240df0680d78328a1ae00d67fb88c2a11931af372

  • SSDEEP

    6144:WIeaN0FQgIeXcHyCES8HcEAyb8MplVpE6SGROVlWKJtyli:WIeFGgIeXOyCp8HckAEDRt8Dftai

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 2 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0cff7bfe12688f52881f3600d0d7172b.exe
    "C:\Users\Admin\AppData\Local\Temp\0cff7bfe12688f52881f3600d0d7172b.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: GetForegroundWindowSpam
    PID:2096

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\nsi400E.tmp\CustomLicense.dll
    Filesize

    2KB

    MD5

    6c20819f7b1b3c25b4cc2aab38bdc6c3

    SHA1

    005c475c579cee2c60d77642d6d9586e0884964e

    SHA256

    156719e9b9f965f0e205aeb9e4f07254ea0576fd422f7e90e8f1d90e5fc51050

    SHA512

    635b602c451a8f29e6618670ebc08753d0008025fc3f0ca7619eaa578a76acaad1a88f86df9be64a3dd50db849e6513e465b1a3eda006da16b9ec03c566de2ea

    Download Submit

  • \Users\Admin\AppData\Local\Temp\nsi400E.tmp\InstallOptions.dll
    Filesize

    12KB

    MD5

    695751df50c11f303b060d63eababe1d

    SHA1

    ffa5fa91750c3e63589fecae8aa90c232611c94d

    SHA256

    4f871b4c8815758f7718ad68d688c6dc05cae205ddf3bcb00147a99746414435

    SHA512

    c9877e0d08c65b23717f3acf3be92ead79c6afde594bd4358694e128fb7149f4a1f33380fae0fb65411e5c68a9d91d2a353b4ef3da5169d3452441eb65880ce0

    Download Submit