Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

6

Static

static

3

35ffcd80cf...d3.exe

windows7-x64

6

35ffcd80cf...d3.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25/12/2023, 18:54

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    35ffcd80cfec27189dd3989d265f53d3.exe

  • Size

    76KB

  • MD5

    35ffcd80cfec27189dd3989d265f53d3

  • SHA1

    0ea7c22e27253a7799dc865d118aef8a92654e7a

  • SHA256

    4cdcfc98c71340c778efe6017112f91548e786df658230e7ac952285cb8b3210

  • SHA512

    8a120db6126d6cac6ad68ec0f46e1c8694ba3be1701c194670ca2a4510c7a627aac558540028ba2154d7bf6180d2847295c142fd337dc7c7088fbdd7c13fff43

  • SSDEEP

    1536:aszKhiHQ1qrPOHK6cnz7IqD7DIo66G8zCzqhY1e/TYUNu9A5gfb8NN8ps:hKcw1JKH/IsnDGiCGNRsumfkN8+

Score
6/10
persistence

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 1 IoCs
    persistence
  • Suspicious behavior: RenamesItself 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\35ffcd80cfec27189dd3989d265f53d3.exe
    "C:\Users\Admin\AppData\Local\Temp\35ffcd80cfec27189dd3989d265f53d3.exe"
    1⤵
    • Adds Run key to start application
    • Suspicious behavior: RenamesItself
    PID:2248

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2248-0-0x0000000000400000-0x0000000000456000-memory.dmp

    Filesize

    344KB

    Download

  • memory/2248-10-0x0000000000400000-0x0000000000456000-memory.dmp

    Filesize

    344KB

    Download