Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    0s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 23:01

General

  • Target

    1f46e2e8f7178bc73e16eb4131dae0f2.exe

  • Size

    206KB

  • MD5

    1f46e2e8f7178bc73e16eb4131dae0f2

  • SHA1

    b2c6eb72d71d69afa3948a30512dd8fafc52ffb4

  • SHA256

    479b1793a94de490112827384fd40dbd445f60495815e5ad5d741c78a4c135c5

  • SHA512

    d12f1130b94f3f7f03365745a19c1c97e1302dae60137869daf42c20b86b76012f2b997bfecef31bbc7451d92e7dda11bb0c869c6b59e434e093be491926209a

  • SSDEEP

    3072:upTqaoFEUX6rO+Mpm9bTAaCOKY8P5EZsetaj/v9hNTyt:u0aYX6rO+MpmqaCOK15DetQv9hYt

Score
5/10

Malware Config

Signatures

  • Drops file in System32 directory 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1f46e2e8f7178bc73e16eb4131dae0f2.exe
    "C:\Users\Admin\AppData\Local\Temp\1f46e2e8f7178bc73e16eb4131dae0f2.exe"
    1⤵
    • Drops file in System32 directory
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:2188
    • \??\c:\windows\SysWOW64\explorer.exe
      c:\windows\system32\explorer.exe
      2⤵
        PID:2548

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads