Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    140s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 00:13

General

  • Target

    082794560dac2c18b4881dc54d80bd2f.exe

  • Size

    347KB

  • MD5

    082794560dac2c18b4881dc54d80bd2f

  • SHA1

    0babaed9467210c63b377602142d298e5f047e4a

  • SHA256

    137f75d9c0fd6ca5df028c419adb84f2abc7cd1376767096b1e854b3460215a3

  • SHA512

    a905f17223031e908a262e5645d760841be74bf7d10da5cedacb9be94224b20b0712cae38658470b684ad4ce7dddbe6ef220beee1ae2c87310d415afc3893fa2

  • SSDEEP

    6144:98WfrI53tF2idZecnl20lHRxp3gnCcUSpHwhARwZEWAHl/EazO3M/wL5JUBf:xfkHF3Z4mxxM/zll/EpM/MIV

Score
4/10

Malware Config

Signatures

  • Drops file in Program Files directory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\082794560dac2c18b4881dc54d80bd2f.exe
    "C:\Users\Admin\AppData\Local\Temp\082794560dac2c18b4881dc54d80bd2f.exe"
    1⤵
    • Drops file in Program Files directory
    PID:2076

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2076-0-0x0000000000400000-0x0000000000468000-memory.dmp

    Filesize

    416KB

  • memory/2076-1-0x0000000000340000-0x0000000000394000-memory.dmp

    Filesize

    336KB

  • memory/2076-4-0x0000000000850000-0x0000000000851000-memory.dmp

    Filesize

    4KB

  • memory/2076-5-0x0000000000400000-0x0000000000468000-memory.dmp

    Filesize

    416KB

  • memory/2076-8-0x00000000003D0000-0x00000000003D1000-memory.dmp

    Filesize

    4KB

  • memory/2076-7-0x0000000000340000-0x0000000000394000-memory.dmp

    Filesize

    336KB

  • memory/2076-6-0x00000000003E0000-0x00000000003E1000-memory.dmp

    Filesize

    4KB

  • memory/2076-3-0x0000000000570000-0x0000000000571000-memory.dmp

    Filesize

    4KB

  • memory/2076-2-0x0000000000820000-0x0000000000821000-memory.dmp

    Filesize

    4KB