Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
28/12/2023, 22:55
Static task
static1
Behavioral task
behavioral1
Sample
fe3d84de136e6906f456a4bdaef6eaea.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
fe3d84de136e6906f456a4bdaef6eaea.exe
Resource
win10v2004-20231215-en
General
-
Target
fe3d84de136e6906f456a4bdaef6eaea.exe
-
Size
283KB
-
MD5
fe3d84de136e6906f456a4bdaef6eaea
-
SHA1
b91d38c4cd297a50b2e61062a02e3154aab61cad
-
SHA256
615fd4bebb05b57801ec5975f19d3eb976e40ce5bd68c2ccc73beb159f50346f
-
SHA512
0a9cf19cf37e89e647eca1247de6af260c005150b47a500f4c06d7c5641fc17af707029457d9ad784744d3165939a74214dac1e1b3e129c77263a60e22d38fb4
-
SSDEEP
6144:Crkb9uEo2S1YnQmCX492DkwNP3qpYF6mYj4IEvKavM2xx0J30F/KTHJ4yWEIo:CrkRu6/eIo4eVIEvFM2KkZKTph3
Malware Config
Signatures
-
Loads dropped DLL 3 IoCs
pid Process 2228 fe3d84de136e6906f456a4bdaef6eaea.exe 2228 fe3d84de136e6906f456a4bdaef6eaea.exe 2228 fe3d84de136e6906f456a4bdaef6eaea.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2228 fe3d84de136e6906f456a4bdaef6eaea.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
269KB
MD5af7ce801c8471c5cd19b366333c153c4
SHA14267749d020a362edbd25434ad65f98b073581f1
SHA256cf7e00ba429bc9f27ccfacc49ae367054f40ada6cede9f513cc29a24e88bf49e
SHA51288655bd940e9b540c4df551fe68135793eceed03f94389b0654637a18b252bf4d3ef73b0c49548b5fa6ba2cf6d9aff79335c4ebcc0b668e008bcc62c40d2a73c
-
Filesize
60KB
MD55f8e3ef6090df78ed65b967f0f31c88c
SHA10a081843e0c13ffe78ce8ef191decd715f555d43
SHA256523f0cbf0fb8506bfd08d838595a83783e7764e6061e9c0648b9163d5c53c97b
SHA5127c1b6922a30c4a21fe3ecf984a0f30810b4156738f3cf8e29dc6fa0ddc96c58e75ba1b35429010d8f9016632329234275bf7f35a9a296674b505091f692da089
-
Filesize
145KB
MD5dcb9a8355be913b52d77c9040141cd3c
SHA1dca3c3c7249d5d0e77aed597893d0620d39da9d8
SHA256d48a10c2e3ca2f9bd8d3daa8948c51b7d1a6a459e755c03964b0b1c2a78d0454
SHA5127200f4ddcae9b12cc7feff9d92f2e32b7efd351c096b47cf7aef5cbdd3aca62181485941c53ac393610d27e2503f1e8eed05610e61c9d18d945eaa79fe395484