Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    1s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    26/12/2023, 08:39

General

  • Target

    6068441c484780f4b89b7c643c988811.exe

  • Size

    133KB

  • MD5

    6068441c484780f4b89b7c643c988811

  • SHA1

    0f56827166e11a8ee2394f4e1b393ce9e57fe6fc

  • SHA256

    242ac59c1441400b822d56753f47563f40ec63d54aee89167d4bad5cfb47f6da

  • SHA512

    27d0ad28576d2f18cd14fa3bb7c4230de4970c1e9a6a4f331295baf150ea2f880da1667bf12e12a898c77db31398947c10e103b9061510ee7c756aec796b2709

  • SSDEEP

    3072:Sf2KXOpaE260E+nCF93efTHZDbFfmzm8QCRRxTtUp7:SfJeJ0pC2VpeQsRRC7

Score
1/10

Malware Config

Signatures

  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SendNotifyMessage 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\6068441c484780f4b89b7c643c988811.exe
    "C:\Users\Admin\AppData\Local\Temp\6068441c484780f4b89b7c643c988811.exe"
    1⤵
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    PID:2112

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    26fbb477939fad89978f69aee48170ee

    SHA1

    c51b011afefa56451e77ff19f424e19149225ad1

    SHA256

    d34512df8f2cee5e9b96bd35868039208a15d6f69211c59ec85cf7aad499c098

    SHA512

    53431024ec89535154fc4c527d2b8afb3fadf43992f15d33dc3978bdfd0ee0d7c20b1222c2fbfe19b82fa8ea50588746b4de7ed07a33ccfd25fc1118246c5765

  • C:\Users\Admin\AppData\Local\Temp\TarF13.tmp

    Filesize

    62KB

    MD5

    aebe5b94c9640c81a84e49e016f53cf2

    SHA1

    1ce3e9eaa79c46d3749cbeb524e9af9b88847b44

    SHA256

    b751971f84b04c3af04c7dcd921cf43bf3b3de72a076d22f59acd1061e48dca2

    SHA512

    02f29445adf4570320ef53a9638ca4c22afe046365b196d6147458fbd3b1928666e1236f0c84784df40bc83c352102f4f62d1c30b6c62e7e0f5d205aabcfbb7f