Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
230s -
max time network
45s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
30/12/2023, 11:32
Static task
static1
Behavioral task
behavioral1
Sample
17359e6853aa0497b66c2171e2b58688.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
17359e6853aa0497b66c2171e2b58688.exe
Resource
win10v2004-20231215-en
General
-
Target
17359e6853aa0497b66c2171e2b58688.exe
-
Size
47KB
-
MD5
17359e6853aa0497b66c2171e2b58688
-
SHA1
99e14de34b300ab27facaa3e947c4b5b4b3513dd
-
SHA256
77d08edf07baa4ce1ff2f1f39cde5444cb33140f2dbb2b40207576ff2083b806
-
SHA512
39a6884d0a288b40ad494da54c1ace15b95c9bdc2292eb8dfc4a650f8e86d9be16a343cef7dae253531a82abdb21737613afc838058934d14127d1d03180c400
-
SSDEEP
768:EyW1yBtObv0U/xwPp0EoooiYECG2nZF5sZVcmx4:24Bobv7aB0EooYEC3rUVcY4
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
pid Process 3036 zbhnd.exe -
Loads dropped DLL 1 IoCs
pid Process 1780 17359e6853aa0497b66c2171e2b58688.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 1780 wrote to memory of 3036 1780 17359e6853aa0497b66c2171e2b58688.exe 27 PID 1780 wrote to memory of 3036 1780 17359e6853aa0497b66c2171e2b58688.exe 27 PID 1780 wrote to memory of 3036 1780 17359e6853aa0497b66c2171e2b58688.exe 27 PID 1780 wrote to memory of 3036 1780 17359e6853aa0497b66c2171e2b58688.exe 27
Processes
-
C:\Users\Admin\AppData\Local\Temp\17359e6853aa0497b66c2171e2b58688.exe"C:\Users\Admin\AppData\Local\Temp\17359e6853aa0497b66c2171e2b58688.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:1780 -
C:\Users\Admin\AppData\Local\Temp\zbhnd.exe"C:\Users\Admin\AppData\Local\Temp\zbhnd.exe"2⤵
- Executes dropped EXE
PID:3036
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
48KB
MD55e15414eda17709c817a69a6a8f5102e
SHA1bf007d7912c6caff5ef98ded1e63cb6b41fafe10
SHA256d12e7005da80db2a5f488dba95be4c9612b096420754cde0c39adf0f6cbc13da
SHA512d8af3718b7c9a598d2bb896dfe1a2b0c76ecd2235d6c88ee0169403e06d1914c32692385fb77b93549a15eef037b9485f3c3e3db8fa3c8a920687aa1d40e53fc