Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 11:59

General

  • Target

    17cb17eb2bbc23b786d194e3199e419e.exe

  • Size

    732KB

  • MD5

    17cb17eb2bbc23b786d194e3199e419e

  • SHA1

    1cb014c53385e60adeb79a06d0a5fe0614bab399

  • SHA256

    831032139510a09994b1500ad16013641519dce287f9adb6241b6ee0b8a1f578

  • SHA512

    581cc5a52106587dce2647b79cc0f6edde3d492c9c2c2fa6b3e53b7a8ad24a4d3327e42a3899ff7f61a289eb034e0e33d4a5d7541d68f2c1552a60c450ab227d

  • SSDEEP

    12288:UShKg8H5btg8d3ZsurFQrfiLXK6duSs2dsED9sXz3B+fR+/9C7E7h8z5dRkT0d+Q:H8Z/3nBQj6b421a+5+wYadLLRz5C2H

Score
5/10

Malware Config

Signatures

  • Drops file in System32 directory 1 IoCs
  • Suspicious behavior: LoadsDriver 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\17cb17eb2bbc23b786d194e3199e419e.exe
    "C:\Users\Admin\AppData\Local\Temp\17cb17eb2bbc23b786d194e3199e419e.exe"
    1⤵
    • Drops file in System32 directory
    PID:2032

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2032-1-0x0000000000400000-0x00000000005C5000-memory.dmp

    Filesize

    1.8MB

  • memory/2032-2-0x0000000000400000-0x00000000005C5000-memory.dmp

    Filesize

    1.8MB

  • memory/2032-4-0x0000000000400000-0x00000000005C5000-memory.dmp

    Filesize

    1.8MB