Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

39b3519799...87.exe

windows7-x64

7

39b3519799...87.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    148s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25/12/2023, 19:58

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    39b3519799651c3a4c541154a0c4f487.exe

  • Size

    3.0MB

  • MD5

    39b3519799651c3a4c541154a0c4f487

  • SHA1

    5bf39b66df210c5f6cb97a7c35c97abbaeab575a

  • SHA256

    7369aca34c1e56501c8771e6e504e9334af1dd5d8080cf379d6bf1901ce9033e

  • SHA512

    06a7b5afae5a5be5873bd00e5ad0524073e155770f085ed3fc66e8ccf79c162997020a25c8317b4b427c412096bb72ea694d470337f4e4ea21d31f9ded1fec60

  • SSDEEP

    98304:gk4gyY1nreB41lPyO37TLN1aavvKScI1iBXwJ8:gkXyYpyB43PLvAXU8

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\39b3519799651c3a4c541154a0c4f487.exe
    "C:\Users\Admin\AppData\Local\Temp\39b3519799651c3a4c541154a0c4f487.exe"
    1⤵
    • Loads dropped DLL
    PID:1108

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\nsd6811.tmp\InstallOptions.dll
    Filesize

    12KB

    MD5

    4c7d97d0786ff08b20d0e8315b5fc3cb

    SHA1

    bb6f475e867b2bf55e4cd214bd4ef68e26d70f6c

    SHA256

    75e20f4c5eb00e9e5cb610273023e9d2c36392fa3b664c264b736c7cc2d1ac84

    SHA512

    f37093fd5cdda74d8f7376c60a05b442f884e9d370347c7c39d84eca88f23fbea6221da2e57197acd78c817a74703c49fb28b89d41c3e34817cc9301b0b6485a

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsd6811.tmp\System.dll
    Filesize

    9KB

    MD5

    e085476805e8f5ef1c7ed635c5309017

    SHA1

    609e79fdc29d6dee40cc5dd333094db5f9f63eec

    SHA256

    4eb689e2db8d683afcfffe6dee1985fbd458d2770093547331d563acece80c67

    SHA512

    082932aea8d993de8ca1eeb60f7bb4e56cc7eab4a683c59822b2c544223febab5915bb2b7c2e2dad79472bbd8ad400770dd7c1f112cef24d18ebd0f1ad63fe9f

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsd6811.tmp\ioSpecial.ini
    Filesize

    702B

    MD5

    cbccbcd842053e7e81de7bcf06aa96eb

    SHA1

    0407ae8ed9e8df7180bd0dfe6ef5bee757656698

    SHA256

    7818bf46f4429c4e75b840d7a108cfe3c30f34d089f984f1972c92c39207c592

    SHA512

    62d5db4ea3ddb6c512b0cc6897b5e1e3169e2d51b5cf1a899a5b339d272ca50a46fac40c7eba6d9212f02c2c123def4fa04478a1fa0b496a8136558475efbb84

    Download Submit