Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
30/12/2023, 06:48
General
-
Target
116f2b637ed8c7b8a9a02fe6d7d9bdc3.exe
-
Size
92KB
-
MD5
116f2b637ed8c7b8a9a02fe6d7d9bdc3
-
SHA1
fb7468b2a8927e969e5cf863c30957dba64939ac
-
SHA256
0b5eb8c030fe2f8bc28bf320dbbb2f88ee9ed52c1f9f8f3df1d36509e8c560bf
-
SHA512
f9c28e9d766b0f94d0523fd0bafa83e9c32dbba979e125360f571895098810584204b7e49d5377eb5fd2a55080c41939cebb27b2758ffcbaacac4525c68d7843
-
SSDEEP
1536:SnZyoJ61G+K31783LU4fXWi8K1Sjzg+LIBjmNv1xZiRhzPh:S8oJ6Gj87UEXWi8K6g+sZ6fCzPh
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\116f2b637ed8c7b8a9a02fe6d7d9bdc3.exe"C:\Users\Admin\AppData\Local\Temp\116f2b637ed8c7b8a9a02fe6d7d9bdc3.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\116f2b637ed8c7b8a9a02fe6d7d9bdc3.exeC:\Users\Admin\AppData\Local\Temp\116f2b637ed8c7b8a9a02fe6d7d9bdc3.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
92KB
MD5428c1027461c02950306d02b80eb9df2
SHA125dc173682f7685f9b9eaecb657ca04ba6ca2b01
SHA256cecbb72fb3e96d3dd5a3b3e2e2d2684b1ce8b1fe52a2d4e93d23d4d9cbb52c9e
SHA5123bb8185d0466b5abafad3aa8a40851721b648a4b1dccff80eeff15ade66e3692fe135f4105c624aa1eb22595e74778a160dc98065d6f30a0b8521d23a6001a49
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
56KB
-
Filesize
188KB
-
Filesize
108KB