Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
30/12/2023, 13:24
Static task
static1
Behavioral task
behavioral1
Sample
19e3c76b63e953bfdfd5f4345591ffcf.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
19e3c76b63e953bfdfd5f4345591ffcf.exe
Resource
win10v2004-20231215-en
General
-
Target
19e3c76b63e953bfdfd5f4345591ffcf.exe
-
Size
281KB
-
MD5
19e3c76b63e953bfdfd5f4345591ffcf
-
SHA1
c59140de3d7ba7134a66e9c2881d47c12c0e375a
-
SHA256
3a70edc738a7adafd6e6ff085052f0df08a2ac2cc67b3a81f39ceb90d119b7f7
-
SHA512
bf64024e9c1681d3f448c88c37e60ae5e74a750fb559f5e95724e0c7a8681bf726875799de2605937213fa08ce0e1efbe7dda4db57b71977b1ab62ff0972065c
-
SSDEEP
6144:1r+yI5RxWBDg7V0eXze6OvA48UEJFeiCLxNw4QC8cdb:1r+yI3sBDJejgP0JHYz1f9b
Malware Config
Signatures
-
Loads dropped DLL 3 IoCs
pid Process 2180 19e3c76b63e953bfdfd5f4345591ffcf.exe 2180 19e3c76b63e953bfdfd5f4345591ffcf.exe 2180 19e3c76b63e953bfdfd5f4345591ffcf.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2180 19e3c76b63e953bfdfd5f4345591ffcf.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
269KB
MD573f84010494b1b9e4b478790bbd3d71a
SHA1136f73ff2ccb0ca4a558f7b72f8d9641bf7ee7f0
SHA25641a58310d5c51c6dea425a4dd7e79c7dea67be75915512990ac263ff8f6e02a0
SHA512e57eddfb249597151e09c4aebd9d2d77239ce677cd47d944202ed2a2a68af042c7b0a9725c366414300647d11c3bdafe3f163c065b8b6c89efa56fc764ac2966
-
Filesize
58KB
MD56e8a29b73d7cb2fff7f60d6160cdadcc
SHA176938d8f6282013f922782a04fb5591eab2901e1
SHA25692748be00d20070b81c154d4bc048ffc2c7196e934f6b92ec49b235c16fb69ee
SHA512f362a5e3dff4bcd77847bd9766ad73ada924ddade1215b972fee5a3ca6a67f9b0ac0763750caef549319b0edc7425fbdb6ca0bf8517e5eac423e12c54977997b
-
Filesize
145KB
MD5355eecd5bbf7d156245ac6513c4badc3
SHA17dbde896f2e57f93f98ba898467ca89cef7b56ac
SHA256381193a96c0aec47c27f458a5d8a706d131cf358ddf237b674263eed6d7e3c65
SHA512bc6eb136f716ab2128ce31a8a5fde1c2b0498bfbad492c152e4a483bc267e20d17eb5c34977d1dfc9338b8088dfa4c70cad12022d148c1f02019df66d4974bd2