Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

165dd2a441...70.exe

windows7-x64

7

165dd2a441...70.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    118s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 10:47

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    165dd2a4413d5bb99ff3b7d4af31dd70.exe

  • Size

    311KB

  • MD5

    165dd2a4413d5bb99ff3b7d4af31dd70

  • SHA1

    3c387c3c8b5bb50f207abb3afc482e728d0671f6

  • SHA256

    1df16e7e52ee9447cedb22eff59c7d32368d7bcbed71c143a40b6e22834b03fa

  • SHA512

    36e07e201e76305cd8c55f7e4b08430d9e9661843d3acb1c8346a9f01c10ee67fac5a45803dda198ce9900e60b67cde4a2ce5b765687a68696daa95780e3b345

  • SSDEEP

    6144:8+K03PMqpGv3+jy8qlH7BjCcrAVgoC7rMstNpfnuzCCLIBVk2Yf:t3kqYmynlHEEAyoETdnKC0MkR

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 8 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\165dd2a4413d5bb99ff3b7d4af31dd70.exe
    "C:\Users\Admin\AppData\Local\Temp\165dd2a4413d5bb99ff3b7d4af31dd70.exe"
    1⤵
    • Loads dropped DLL
    PID:3044

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\nsd1102.tmp\nsisdl.dll
    Filesize

    14KB

    MD5

    1dadb63a5dfaa0679485c5dbaf96033f

    SHA1

    d1717aab683c55bd13bbd520d2a91178efa0d676

    SHA256

    72c65f7cd4a611b077b1ad0be8185780909e9cb04c53ecdac3e17fc72c99b245

    SHA512

    46535c2d96937d49ee7c222428db4a8d61eb346efa0845fcd88e06523ed7836518e5a72d623e9c5563bf6759b449b6d2fcb0340b98a6e7966027bc983db4f722

    Download Submit