Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

6

Static

static

3

07678ff6e8...2f.exe

windows7-x64

6

07678ff6e8...2f.exe

windows10-2004-x64

6

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    29/12/2023, 23:45

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    07678ff6e83fb7c4aa7e5596d4efcb2f.exe

  • Size

    93KB

  • MD5

    07678ff6e83fb7c4aa7e5596d4efcb2f

  • SHA1

    f5c58346ee4070047690f8a57bcc44f894fedd72

  • SHA256

    d477d0991eb7c8bdd7a84755f0703469f923a8d3e92e25f3ef45eda96be31df9

  • SHA512

    a988a7fee1a446bf01446a6f1e858e691dd2aec77de38aaa2b11de100132d90f8658cbedd6ff390fd8702b5601b7a92c2b8909a90043a76c00f1e7f4a9bde311

  • SSDEEP

    1536:poquHm0GQaahAGYxqwQXnkSi8umbNzByQXhcBVecDQdq5CKSbxfhHLCTyx:d9ahAzB0k98/b94NBVJr5C/xhHeTyx

Score
6/10
persistence

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 1 IoCs
    persistence
  • Drops file in Windows directory 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\07678ff6e83fb7c4aa7e5596d4efcb2f.exe
    "C:\Users\Admin\AppData\Local\Temp\07678ff6e83fb7c4aa7e5596d4efcb2f.exe"
    1⤵
    • Adds Run key to start application
    • Drops file in Windows directory
    • Suspicious behavior: EnumeratesProcesses
    PID:1900

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1900-1-0x0000000000400000-0x000000000041E000-memory.dmp

    Filesize

    120KB

    Download