Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    24/12/2023, 20:24

General

  • Target

    10b6943e9c12f21189309b3dc2802106.exe

  • Size

    297KB

  • MD5

    10b6943e9c12f21189309b3dc2802106

  • SHA1

    67481cc6da0ff01aef83d594332cce56a58fa713

  • SHA256

    aa70e015254b4baae5c9c2b281e2968aa53bf52d4f7e0d057f6b7312b5b741a1

  • SHA512

    40f7c7b6f98d77ba9ac820c97c5917a553ae637d38df3e1010c93352aecd73d03c56372addedfa904b774dafa026d02125b736e2a945579900acf2e0e7b51f7d

  • SSDEEP

    6144:YbxubikKpOtYDsTrIe2srRaZlEPx95VHncjviu:Y8U4aDs3i6IDcxTVmviu

Score
6/10

Malware Config

Signatures

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Windows directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\10b6943e9c12f21189309b3dc2802106.exe
    "C:\Users\Admin\AppData\Local\Temp\10b6943e9c12f21189309b3dc2802106.exe"
    1⤵
    • Drops file in Windows directory
    PID:2380

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2380-0-0x0000000000F00000-0x0000000000F40000-memory.dmp

    Filesize

    256KB

  • memory/2380-2-0x00000000001C0000-0x0000000000200000-memory.dmp

    Filesize

    256KB

  • memory/2380-1-0x0000000000840000-0x0000000000880000-memory.dmp

    Filesize

    256KB

  • memory/2380-4-0x00000000000F0000-0x000000000011F000-memory.dmp

    Filesize

    188KB