Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
142s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
26/12/2023, 12:49 UTC
General
-
Target
6fbbce8cfe9671149fa0c23b99fe512e.exe
-
Size
548KB
-
MD5
6fbbce8cfe9671149fa0c23b99fe512e
-
SHA1
f0a9916d71cfdfbbc6efb35fb546659769fe6f37
-
SHA256
e05457139e52d91258a6fc31d951af5bf9d8cd8c54dfee8b88b4a329597a0a6b
-
SHA512
700a1d2d780bfede72a3ffc45854322dcbeb4a0ea483e21c50ae7892daf63814cc79444aa920ebca2339322b9f2c161683ad9406c7f667acc06ccd0500c9c918
-
SSDEEP
12288:7k0viQ/N5NEkDtUCsnCPKyN9nEt55ydJ7rr:Y07N5NrDtpjtE5ydZ
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Drops file in System32 directory 1 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\6fbbce8cfe9671149fa0c23b99fe512e.exe"C:\Users\Admin\AppData\Local\Temp\6fbbce8cfe9671149fa0c23b99fe512e.exe"1⤵
- Adds Run key to start application
- Drops file in System32 directory
- Suspicious use of FindShellTrayWindow
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
576KB
-
Filesize
4KB
-
Filesize
4KB