Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
25/12/2023, 22:25
Static task
static1
Behavioral task
behavioral1
Sample
3ffea61d3bf444fe3f580ecd7d424a36.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3ffea61d3bf444fe3f580ecd7d424a36.exe
Resource
win10v2004-20231222-en
General
-
Target
3ffea61d3bf444fe3f580ecd7d424a36.exe
-
Size
138KB
-
MD5
3ffea61d3bf444fe3f580ecd7d424a36
-
SHA1
64219e7210b4b23746dd815fed60f40d8ab6f2e8
-
SHA256
14b3c3dbf7c4c58f7ba5ca286bb926fb3842c5d2f5700ac78227f350f83438a5
-
SHA512
51d797ab803fba707fc93431de034e794983dda39c37eba07f6faace8b675cb2a88f9a7aebd5fe9d3f802a659d705edd058cef1fbb17a1ef4eb19b9d25687bd6
-
SSDEEP
3072:F0myqqiDm7HRRbVxU0PvcoF1ZBIdzj+57fGfS5Rx:3JqxDbc0tF1fIdOBUS5X
Malware Config
Signatures
-
Drops file in System32 directory 3 IoCs
description ioc Process File created C:\Windows\SysWOW64\ortyeras.config 3ffea61d3bf444fe3f580ecd7d424a36.exe File opened for modification C:\Windows\SysWOW64\ortyeras.config 3ffea61d3bf444fe3f580ecd7d424a36.exe File created C:\Windows\SysWOW64\ortyerase8a-7cd.sys 3ffea61d3bf444fe3f580ecd7d424a36.exe -
Suspicious behavior: LoadsDriver 1 IoCs
pid Process 468 Process not Found
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
5KB
MD5cca858b7a3644eccc070a1297887a5d6
SHA1131c405ce4abd58bf3707bbdd42a8be161433a5d
SHA2569882c77781d65cafdf87e7ca253968d222f55280910be999179bd725a7792160
SHA512338af297837fddda25af0d997ac56ae6a50644a2b8b2a63488b11151563e64641e61fb2dd103d66ffe1f9cafc69b8b84a12b495c7a1d10fc18dabea8d1498a87
-
Filesize
567B
MD59adaddf89fe07555fbb9989d3c28d685
SHA16d45d012c33d0cc0949c2b7f95e4c5bb8ba506e3
SHA256c356f974c5da17815079e617b402a694493cebffac1ec491a4c14919675b07d5
SHA51224f35ef3f9035301e5f9dead91e8cfe08d7928e4e60e6f35aa4904f2fe793c9772fbd80262b5be2ed19a6aaae11e17658022c3d42b037cbc18b6d64650728a8a