Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
5s -
max time network
149s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
29/12/2023, 12:20
General
-
Target
a5693579c54f44de4fb5da56bb29ef31b4e54eda9e508d6f1141ae041e0161d5.exe
-
Size
223KB
-
MD5
7cd2047afc4cb57c9bf0db6298fa93f2
-
SHA1
191af944c3e4595853f7133d17bc338eadf68c22
-
SHA256
a5693579c54f44de4fb5da56bb29ef31b4e54eda9e508d6f1141ae041e0161d5
-
SHA512
0831ff19281a241e887f72422610d78423f95d7cbad6aac9a922207bb677dbba2ee0c18702009aaa59450d55183817f425642be27bab38ce30385545d768356b
-
SSDEEP
3072:ZZ7wXfSRZ0ON/EwW66wN94xu4CkAZJM2k5D66L+NfGbVON2Nqi/6gS5UoWXHz72n:zwPSUONLNsuWA7koN+boRi9S6oiz72D
Malware Config
Signatures
-
UPX packed file 5 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unexpected DNS network traffic destination 3 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Suspicious behavior: EnumeratesProcesses 3 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\a5693579c54f44de4fb5da56bb29ef31b4e54eda9e508d6f1141ae041e0161d5.exe"C:\Users\Admin\AppData\Local\Temp\a5693579c54f44de4fb5da56bb29ef31b4e54eda9e508d6f1141ae041e0161d5.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
9KB
MD5f1c9a3328968b0c2b27df5b4f589840c
SHA12dea0110e27f32ef57b0449d29caeb33a5ed08d5
SHA256cb3f44d7737debfc33e27e0277692f0d7bb7c0a03d89297d7f64db81de603cd1
SHA512d285da3244f8cbca903fcbb29624b527c8523624c90f24f04bd907f6c0e39b4027addf98c2e81c5b49131c8f69eb49a36a50bca7b0b2f1284146015475135640
-
Filesize
4KB
MD59a28eca6d59c981d435710d41e576871
SHA1b516c4422c3db40e5725c82ec7e6a083e689481b
SHA256550a735fc529069ac709ac26be06f3d88feba135f4cba0cde4baed9c0c673037
SHA512d79ce39edef01d1e3b0f5ef4a99a0d7b9d61e55fba4ec1c5d44b372f75375a2680bef4cbfe01d410ea2ceaa41b9d1d002f811999f8de1d6ca85e853d1228aea0
-
Filesize
440KB
-
Filesize
440KB
-
Filesize
440KB
-
Filesize
440KB
-
Filesize
440KB