Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25/12/2023, 22:25

General

  • Target

    3ffea61d3bf444fe3f580ecd7d424a36.exe

  • Size

    138KB

  • MD5

    3ffea61d3bf444fe3f580ecd7d424a36

  • SHA1

    64219e7210b4b23746dd815fed60f40d8ab6f2e8

  • SHA256

    14b3c3dbf7c4c58f7ba5ca286bb926fb3842c5d2f5700ac78227f350f83438a5

  • SHA512

    51d797ab803fba707fc93431de034e794983dda39c37eba07f6faace8b675cb2a88f9a7aebd5fe9d3f802a659d705edd058cef1fbb17a1ef4eb19b9d25687bd6

  • SSDEEP

    3072:F0myqqiDm7HRRbVxU0PvcoF1ZBIdzj+57fGfS5Rx:3JqxDbc0tF1fIdOBUS5X

Score
5/10

Malware Config

Signatures

  • Drops file in System32 directory 3 IoCs
  • Suspicious behavior: LoadsDriver 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3ffea61d3bf444fe3f580ecd7d424a36.exe
    "C:\Users\Admin\AppData\Local\Temp\3ffea61d3bf444fe3f580ecd7d424a36.exe"
    1⤵
    • Drops file in System32 directory
    PID:2060

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Windows\SysWOW64\ortyeras.config

    Filesize

    5KB

    MD5

    cca858b7a3644eccc070a1297887a5d6

    SHA1

    131c405ce4abd58bf3707bbdd42a8be161433a5d

    SHA256

    9882c77781d65cafdf87e7ca253968d222f55280910be999179bd725a7792160

    SHA512

    338af297837fddda25af0d997ac56ae6a50644a2b8b2a63488b11151563e64641e61fb2dd103d66ffe1f9cafc69b8b84a12b495c7a1d10fc18dabea8d1498a87

  • C:\Windows\SysWOW64\ortyeras.config

    Filesize

    567B

    MD5

    9adaddf89fe07555fbb9989d3c28d685

    SHA1

    6d45d012c33d0cc0949c2b7f95e4c5bb8ba506e3

    SHA256

    c356f974c5da17815079e617b402a694493cebffac1ec491a4c14919675b07d5

    SHA512

    24f35ef3f9035301e5f9dead91e8cfe08d7928e4e60e6f35aa4904f2fe793c9772fbd80262b5be2ed19a6aaae11e17658022c3d42b037cbc18b6d64650728a8a