Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
26/12/2023, 07:46
General
-
Target
5d6ce35a1c2db1d5777b4190f13d6889.exe
-
Size
82KB
-
MD5
5d6ce35a1c2db1d5777b4190f13d6889
-
SHA1
7cb214de1e600ff1948976702d8f46961e1c3635
-
SHA256
dc59d7dbf3156d1dde3be50d50bf5538b2d36337fb78790f6adf4e63fc35eede
-
SHA512
0420a59225082f3dadd5cf2abd5ed149ff7b5340a483aa10c14859098bb6f06bdbc45947d965f58fecbc072153cd3f79a68d1743e6d13d9ec0da25e417c8f83c
-
SSDEEP
1536:xzRf1WODfKweiw7fHPOo0kS4nabYHakr73OLJoMl:MODihjPN0DulHvn3uuS
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\5d6ce35a1c2db1d5777b4190f13d6889.exe"C:\Users\Admin\AppData\Local\Temp\5d6ce35a1c2db1d5777b4190f13d6889.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\5d6ce35a1c2db1d5777b4190f13d6889.exeC:\Users\Admin\AppData\Local\Temp\5d6ce35a1c2db1d5777b4190f13d6889.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
82KB
MD5da037536ea53f78ee2f0797ce30cbd99
SHA1799f78809022fa967176108a5edeea0b25d2e38c
SHA256d85a840ec66a8629b72aa2def9b66b076954a63fe8dec604c5977d6a320964ae
SHA512a850552d62b22eb9f49b8efa24f8206269c098594e476fde6365fef21816f4a381a2f7b972d0584a9054fbaef39eb953eb5b5b7f82d7b11c310257b2e8305a33
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
56KB
-
Filesize
108KB