Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 09:48

General

  • Target

    95c9caf199e1b388efca8156e0050c610a06f3a5dd9a4eacea1000a6c9f6f836.exe

  • Size

    14.2MB

  • MD5

    9e9042db828a5cf8e6aa6e2b98f55b67

  • SHA1

    7ca6102a7ca8e305c8f61cb149e9ceb58607b55d

  • SHA256

    95c9caf199e1b388efca8156e0050c610a06f3a5dd9a4eacea1000a6c9f6f836

  • SHA512

    2451f94363afd6f21aea14dbe43e94cbc034e573cdce6fc209cc263c240256f5669cf38532673b4c970f8b7c3744e9905e4514b5f56aed0bede6e77513896d31

  • SSDEEP

    98304:IRp/XQ8KkzgORxptX/uTGCkv/Th4JIfNtB1VN+kvaaRb7ujEMXDLJtnel:CtXQ8KkzgOzX/uTGCkv/ThYstLVN+PG

Score
1/10

Malware Config

Signatures

  • Modifies system certificate store 2 TTPs 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\95c9caf199e1b388efca8156e0050c610a06f3a5dd9a4eacea1000a6c9f6f836.exe
    "C:\Users\Admin\AppData\Local\Temp\95c9caf199e1b388efca8156e0050c610a06f3a5dd9a4eacea1000a6c9f6f836.exe"
    1⤵
    • Modifies system certificate store
    PID:2892

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarA62.tmp

    Filesize

    61KB

    MD5

    1f57f0fbfb7aae2601b7017d1b9c1d13

    SHA1

    a4d07c5beefebfc51c3c66d322cba424669017b4

    SHA256

    d1ff91332604d2c44866f4cd7ee8c1893da730d62c13078574805002b5d0dadc

    SHA512

    e8f901cedf6f0ac4e8d874746b4201bf78ed8f50e26f075c6430aad935d303e770dfed7d10192ee19f1ffad057cfc90e2c7f2bddebde97a029a3f1be5fbc8340

  • memory/2892-36-0x000000013F5B0000-0x000000014011A000-memory.dmp

    Filesize

    11.4MB

  • memory/2892-54-0x000000013F5B0000-0x000000014011A000-memory.dmp

    Filesize

    11.4MB