Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
25/12/2023, 04:12
Static task
static1
Behavioral task
behavioral1
Sample
04a4243b50312c5e633867d8d4bebb66.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
04a4243b50312c5e633867d8d4bebb66.exe
Resource
win10v2004-20231222-en
General
-
Target
04a4243b50312c5e633867d8d4bebb66.exe
-
Size
299KB
-
MD5
04a4243b50312c5e633867d8d4bebb66
-
SHA1
b55b20cb4e22c79a82dccbbb18b4dcea2808eef8
-
SHA256
c2dc9f63e293e3bb08ef664e8851b16b122e87cc6996672ac64154be1ff27be6
-
SHA512
75d8d8d22300642d6b6c9d4a64d74466134faf91e19d266d5ad98b417b0b64d17f19aab6b4dd5b897b9bb24745966ca6f23c4833a51e5b1c1b8ba5873d4c7020
-
SSDEEP
6144:Tiekpg6AwTO4hkgY9c/vfQwH9snnGW+4/LpUz:T8i4hDY9COnnGW7pUz
Malware Config
Signatures
-
Drops startup file 1 IoCs
description ioc Process File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\04a4243b50312c5e633867d8d4bebb66.lnk 04a4243b50312c5e633867d8d4bebb66.exe -
Loads dropped DLL 1 IoCs
pid Process 1764 04a4243b50312c5e633867d8d4bebb66.exe -
Drops file in Windows directory 1 IoCs
description ioc Process File created C:\Windows\Tasks\Bidaily Synchronize Task.job 04a4243b50312c5e633867d8d4bebb66.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
25KB
MD5d5d3de913663b504c48d62826b0719d0
SHA1c3525751ec83a24374b83ba057ab754fb7e065a0
SHA256f28a23ccd189854c240a80e0df8ffe7f4f4aba3472f80dc07899beaf8716fa85
SHA512de43261419001bafb6a90180871878bf3d8f685ddd4d3639549487acc924707c61a1334c9449dd484a477699973959bf68cb0327857e86ce00afbe8a2c16214e