Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
141s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
26/12/2023, 15:57
General
-
Target
7ac932c877a80bd981598f37ccdf1e6c.exe
-
Size
703KB
-
MD5
7ac932c877a80bd981598f37ccdf1e6c
-
SHA1
8204d408d56a590a2dcb629739815112dbd9a16e
-
SHA256
9c216ca074eff0fe66a134a978b883bc27b7ac3d5f29f951e90f0dac980deb61
-
SHA512
721ec8b29681b5144df78efa7ce9f1b867532543491181b0613fa278d2b9d3d88363a819d7fd32959b953217e10cbf5c887ac4d17ed7c344f8c60e3ac1f24cbc
-
SSDEEP
12288:YRycYktU4g/n/t0EW5A0ckOvJwQ5oalK+Geh4v6jIk6bQQ52LwRg08S5nt1/Pk:cxnU4gf2EW5AdHJr1kMh4vOIk6LXlH
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Windows directory 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\7ac932c877a80bd981598f37ccdf1e6c.exe"C:\Users\Admin\AppData\Local\Temp\7ac932c877a80bd981598f37ccdf1e6c.exe"1⤵
- Drops file in Windows directory
- Suspicious use of AdjustPrivilegeToken
-
C:\Program Files\Internet Explorer\IEXPLORE.EXE"C:\Program Files\Internet Explorer\IEXPLORE.EXE"1⤵
-
C:\Windows\NoHacker.cn.exeC:\Windows\NoHacker.cn.exe1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
703KB
MD57ac932c877a80bd981598f37ccdf1e6c
SHA18204d408d56a590a2dcb629739815112dbd9a16e
SHA2569c216ca074eff0fe66a134a978b883bc27b7ac3d5f29f951e90f0dac980deb61
SHA512721ec8b29681b5144df78efa7ce9f1b867532543491181b0613fa278d2b9d3d88363a819d7fd32959b953217e10cbf5c887ac4d17ed7c344f8c60e3ac1f24cbc
-
Filesize
4KB
-
Filesize
780KB
-
Filesize
780KB
-
Filesize
4KB
-
Filesize
780KB
-
Filesize
780KB
-
Filesize
4KB
-
Filesize
780KB