Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    24/12/2023, 20:30

General

  • Target

    110639b18c922f5b53fac383726ca017.exe

  • Size

    298KB

  • MD5

    110639b18c922f5b53fac383726ca017

  • SHA1

    ac0396f0c7a2d8203ce1787faf43cff0b95160f1

  • SHA256

    434795133de57539ca28cddfcbd34a6d3c286de6ef0a1b734c3a0ef446ee5e02

  • SHA512

    f11d621f5819dc185f5537ef36f4a9761db4ad004ca80bd09bc2a36e5b67f6f10648cf149fe704ec2f6884a8393263ec1a7c88d2f73ddbb7d09db6832597efbb

  • SSDEEP

    6144:FFXADQv4YtO8cAsRZZGvNZpzHb438D9VROY8LEDjXW:FOc5DEspzHbmyRWEDjXW

Score
6/10

Malware Config

Signatures

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Windows directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\110639b18c922f5b53fac383726ca017.exe
    "C:\Users\Admin\AppData\Local\Temp\110639b18c922f5b53fac383726ca017.exe"
    1⤵
    • Drops file in Windows directory
    PID:2656

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2656-0-0x00000000002F0000-0x0000000000330000-memory.dmp

    Filesize

    256KB

  • memory/2656-1-0x0000000000130000-0x0000000000170000-memory.dmp

    Filesize

    256KB

  • memory/2656-2-0x0000000000260000-0x00000000002A0000-memory.dmp

    Filesize

    256KB

  • memory/2656-4-0x0000000000170000-0x000000000019F000-memory.dmp

    Filesize

    188KB