Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    0s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    25/12/2023, 09:06

General

  • Target

    13d735a9a2e5288112a97b283ff81f5d.exe

  • Size

    823KB

  • MD5

    13d735a9a2e5288112a97b283ff81f5d

  • SHA1

    4a6c7d79c239584945f64e7004ebff35ea5e1ae4

  • SHA256

    f0c46967b991bef4b0d4d5a32db125ec51c8442ad72f5641f401725480d8b316

  • SHA512

    3b4b9febf566a123860245e97561d2020083fd0ed3557c991250f065180c33a78cbac1e6a581b186e8c592846d26871d3ef31f0cfbefebb5f5ab8a0e985d49d8

  • SSDEEP

    24576:9VTMu+r0ovhZsqQv5XabyGO+8h6ey0OsFZjoKJGB:9V4K+T7Qv5qu/F/y09Zc

Score
6/10

Malware Config

Signatures

  • Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\13d735a9a2e5288112a97b283ff81f5d.exe
    "C:\Users\Admin\AppData\Local\Temp\13d735a9a2e5288112a97b283ff81f5d.exe"
    1⤵
    • Writes to the Master Boot Record (MBR)
    PID:948

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/948-0-0x0000000000400000-0x0000000000A3B000-memory.dmp

    Filesize

    6.2MB

  • memory/948-2-0x0000000000400000-0x0000000000A3B000-memory.dmp

    Filesize

    6.2MB

  • memory/948-1-0x00000000002A0000-0x00000000002A1000-memory.dmp

    Filesize

    4KB

  • memory/948-5-0x00000000002B0000-0x00000000002B1000-memory.dmp

    Filesize

    4KB

  • memory/948-6-0x0000000000400000-0x0000000000A3B000-memory.dmp

    Filesize

    6.2MB

  • memory/948-4-0x0000000000400000-0x0000000000A3B000-memory.dmp

    Filesize

    6.2MB

  • memory/948-7-0x0000000000400000-0x0000000000A3B000-memory.dmp

    Filesize

    6.2MB

  • memory/948-8-0x0000000000400000-0x0000000000A3B000-memory.dmp

    Filesize

    6.2MB

  • memory/948-10-0x00000000002B0000-0x00000000002B1000-memory.dmp

    Filesize

    4KB

  • memory/948-9-0x0000000000400000-0x0000000000A3B000-memory.dmp

    Filesize

    6.2MB

  • memory/948-11-0x0000000000400000-0x0000000000A3B000-memory.dmp

    Filesize

    6.2MB

  • memory/948-13-0x0000000000400000-0x0000000000A3B000-memory.dmp

    Filesize

    6.2MB

  • memory/948-14-0x0000000000400000-0x0000000000A3B000-memory.dmp

    Filesize

    6.2MB

  • memory/948-15-0x0000000000400000-0x0000000000A3B000-memory.dmp

    Filesize

    6.2MB

  • memory/948-16-0x0000000000400000-0x0000000000A3B000-memory.dmp

    Filesize

    6.2MB

  • memory/948-17-0x0000000000400000-0x0000000000A3B000-memory.dmp

    Filesize

    6.2MB

  • memory/948-18-0x0000000000400000-0x0000000000A3B000-memory.dmp

    Filesize

    6.2MB

  • memory/948-19-0x0000000000400000-0x0000000000A3B000-memory.dmp

    Filesize

    6.2MB

  • memory/948-20-0x0000000000400000-0x0000000000A3B000-memory.dmp

    Filesize

    6.2MB

  • memory/948-21-0x0000000000400000-0x0000000000A3B000-memory.dmp

    Filesize

    6.2MB

  • memory/948-22-0x0000000000400000-0x0000000000A3B000-memory.dmp

    Filesize

    6.2MB

  • memory/948-23-0x0000000000400000-0x0000000000A3B000-memory.dmp

    Filesize

    6.2MB

  • memory/948-24-0x0000000000400000-0x0000000000A3B000-memory.dmp

    Filesize

    6.2MB