Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25/12/2023, 04:12

General

  • Target

    04a4243b50312c5e633867d8d4bebb66.exe

  • Size

    299KB

  • MD5

    04a4243b50312c5e633867d8d4bebb66

  • SHA1

    b55b20cb4e22c79a82dccbbb18b4dcea2808eef8

  • SHA256

    c2dc9f63e293e3bb08ef664e8851b16b122e87cc6996672ac64154be1ff27be6

  • SHA512

    75d8d8d22300642d6b6c9d4a64d74466134faf91e19d266d5ad98b417b0b64d17f19aab6b4dd5b897b9bb24745966ca6f23c4833a51e5b1c1b8ba5873d4c7020

  • SSDEEP

    6144:Tiekpg6AwTO4hkgY9c/vfQwH9snnGW+4/LpUz:T8i4hDY9COnnGW7pUz

Score
7/10

Malware Config

Signatures

  • Drops startup file 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Drops file in Windows directory 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\04a4243b50312c5e633867d8d4bebb66.exe
    "C:\Users\Admin\AppData\Local\Temp\04a4243b50312c5e633867d8d4bebb66.exe"
    1⤵
    • Drops startup file
    • Loads dropped DLL
    • Drops file in Windows directory
    PID:1764

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • \ProgramData\{372d8357-c9ec-5faf-372d-d8357c9e0d5f}\04a4243b50312c5e633867d8d4bebb66.exe

    Filesize

    25KB

    MD5

    d5d3de913663b504c48d62826b0719d0

    SHA1

    c3525751ec83a24374b83ba057ab754fb7e065a0

    SHA256

    f28a23ccd189854c240a80e0df8ffe7f4f4aba3472f80dc07899beaf8716fa85

    SHA512

    de43261419001bafb6a90180871878bf3d8f685ddd4d3639549487acc924707c61a1334c9449dd484a477699973959bf68cb0327857e86ce00afbe8a2c16214e

  • memory/1764-20-0x00000000006F0000-0x00000000006F1000-memory.dmp

    Filesize

    4KB

  • memory/1764-18-0x0000000000690000-0x0000000000691000-memory.dmp

    Filesize

    4KB

  • memory/1764-31-0x0000000000730000-0x0000000000731000-memory.dmp

    Filesize

    4KB

  • memory/1764-32-0x00000000028D0000-0x00000000028D1000-memory.dmp

    Filesize

    4KB

  • memory/1764-30-0x00000000006E0000-0x00000000006E1000-memory.dmp

    Filesize

    4KB

  • memory/1764-9-0x00000000027E0000-0x000000000280F000-memory.dmp

    Filesize

    188KB

  • memory/1764-29-0x00000000006A0000-0x00000000006A1000-memory.dmp

    Filesize

    4KB

  • memory/1764-28-0x0000000000030000-0x0000000000031000-memory.dmp

    Filesize

    4KB

  • memory/1764-19-0x00000000006B0000-0x00000000006B1000-memory.dmp

    Filesize

    4KB

  • memory/1764-26-0x0000000002850000-0x0000000002851000-memory.dmp

    Filesize

    4KB

  • memory/1764-25-0x0000000000B70000-0x0000000000B71000-memory.dmp

    Filesize

    4KB

  • memory/1764-24-0x0000000000B60000-0x0000000000B61000-memory.dmp

    Filesize

    4KB

  • memory/1764-23-0x0000000000720000-0x0000000000721000-memory.dmp

    Filesize

    4KB

  • memory/1764-22-0x0000000000710000-0x0000000000711000-memory.dmp

    Filesize

    4KB

  • memory/1764-13-0x0000000000260000-0x0000000000261000-memory.dmp

    Filesize

    4KB

  • memory/1764-21-0x0000000000700000-0x0000000000701000-memory.dmp

    Filesize

    4KB

  • memory/1764-27-0x0000000002860000-0x0000000002861000-memory.dmp

    Filesize

    4KB

  • memory/1764-7-0x0000000000230000-0x0000000000231000-memory.dmp

    Filesize

    4KB

  • memory/1764-17-0x0000000000680000-0x0000000000681000-memory.dmp

    Filesize

    4KB

  • memory/1764-16-0x0000000000280000-0x0000000000281000-memory.dmp

    Filesize

    4KB

  • memory/1764-15-0x0000000000270000-0x0000000000271000-memory.dmp

    Filesize

    4KB

  • memory/1764-11-0x0000000000250000-0x0000000000251000-memory.dmp

    Filesize

    4KB

  • memory/1764-8-0x0000000000240000-0x0000000000241000-memory.dmp

    Filesize

    4KB

  • memory/1764-6-0x0000000000220000-0x0000000000221000-memory.dmp

    Filesize

    4KB

  • memory/1764-5-0x0000000000170000-0x0000000000171000-memory.dmp

    Filesize

    4KB

  • memory/1764-4-0x0000000000160000-0x0000000000161000-memory.dmp

    Filesize

    4KB

  • memory/1764-3-0x0000000000150000-0x0000000000151000-memory.dmp

    Filesize

    4KB

  • memory/1764-2-0x0000000000090000-0x0000000000091000-memory.dmp

    Filesize

    4KB

  • memory/1764-1-0x0000000000080000-0x0000000000081000-memory.dmp

    Filesize

    4KB

  • memory/1764-0-0x0000000000020000-0x0000000000021000-memory.dmp

    Filesize

    4KB

  • memory/1764-41-0x0000000002990000-0x0000000002991000-memory.dmp

    Filesize

    4KB

  • memory/1764-42-0x0000000002990000-0x0000000002991000-memory.dmp

    Filesize

    4KB