Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
29/12/2023, 18:35
General
-
Target
009b52b3f66bb04759acaa338848ee1f.exe
-
Size
334KB
-
MD5
009b52b3f66bb04759acaa338848ee1f
-
SHA1
d507ed9078a8927aa05cf62e2b9a23ab8b74ef3a
-
SHA256
242f7b16040cc284654930e872c7dddb7b5a4640fba0de42669a8c9ef321598b
-
SHA512
5da9e91bb96a6b1fc6ea069e444851b62541255973e5e290c1c9e376c12f683da3f4514669b00eac4c61fbac46e6ca4c936667dff338d93d7eb09a2abf5f0428
-
SSDEEP
6144:MnyswfWCVUP89jgiqUP8tucUpCL/W1qQmMJZRESeGuz3V8AbtQJYr:MyJfzVj9PqUozi2W1vmWZRbim+
Malware Config
Signatures
-
Loads dropped DLL 2 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies Internet Explorer settings 1 TTPs 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\009b52b3f66bb04759acaa338848ee1f.exe"C:\Users\Admin\AppData\Local\Temp\009b52b3f66bb04759acaa338848ee1f.exe"1⤵
- Loads dropped DLL
- Modifies Internet Explorer settings
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
259KB
MD56079171ee93812a5b89afa3a92f6fee3
SHA17662e979b2c6b042af377f757a84ab6e87d72351
SHA256978ada3bdbdc831f9a48db57e8c2085f651106b5402c90b6017787dc454e12dc
SHA5122d7af0d0db257bd7c1c0a35296c642c7ccba2a4515fdc17e55f6bf11730f1feacd761aef710e300d0d58879f759cf984ec97f148acb91998e1ce998f7240d06d
-
Filesize
280KB
-
Filesize
6.9MB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
7.6MB
-
Filesize
6.9MB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
6.9MB