Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

19e3c76b63...cf.exe

windows7-x64

7

19e3c76b63...cf.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    122s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 13:24

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    19e3c76b63e953bfdfd5f4345591ffcf.exe

  • Size

    281KB

  • MD5

    19e3c76b63e953bfdfd5f4345591ffcf

  • SHA1

    c59140de3d7ba7134a66e9c2881d47c12c0e375a

  • SHA256

    3a70edc738a7adafd6e6ff085052f0df08a2ac2cc67b3a81f39ceb90d119b7f7

  • SHA512

    bf64024e9c1681d3f448c88c37e60ae5e74a750fb559f5e95724e0c7a8681bf726875799de2605937213fa08ce0e1efbe7dda4db57b71977b1ab62ff0972065c

  • SSDEEP

    6144:1r+yI5RxWBDg7V0eXze6OvA48UEJFeiCLxNw4QC8cdb:1r+yI3sBDJejgP0JHYz1f9b

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\19e3c76b63e953bfdfd5f4345591ffcf.exe
    "C:\Users\Admin\AppData\Local\Temp\19e3c76b63e953bfdfd5f4345591ffcf.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: GetForegroundWindowSpam
    PID:2180

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\Tsu40CD33C4.dll
    Filesize

    269KB

    MD5

    73f84010494b1b9e4b478790bbd3d71a

    SHA1

    136f73ff2ccb0ca4a558f7b72f8d9641bf7ee7f0

    SHA256

    41a58310d5c51c6dea425a4dd7e79c7dea67be75915512990ac263ff8f6e02a0

    SHA512

    e57eddfb249597151e09c4aebd9d2d77239ce677cd47d944202ed2a2a68af042c7b0a9725c366414300647d11c3bdafe3f163c065b8b6c89efa56fc764ac2966

    Download Submit

  • \Users\Admin\AppData\Local\Temp\{6FF4FA55-D30B-4129-A3C2-9B29B417D8A3}\Custom.dll
    Filesize

    58KB

    MD5

    6e8a29b73d7cb2fff7f60d6160cdadcc

    SHA1

    76938d8f6282013f922782a04fb5591eab2901e1

    SHA256

    92748be00d20070b81c154d4bc048ffc2c7196e934f6b92ec49b235c16fb69ee

    SHA512

    f362a5e3dff4bcd77847bd9766ad73ada924ddade1215b972fee5a3ca6a67f9b0ac0763750caef549319b0edc7425fbdb6ca0bf8517e5eac423e12c54977997b

    Download Submit

  • \Users\Admin\AppData\Local\Temp\{6FF4FA55-D30B-4129-A3C2-9B29B417D8A3}\_Setup.dll
    Filesize

    145KB

    MD5

    355eecd5bbf7d156245ac6513c4badc3

    SHA1

    7dbde896f2e57f93f98ba898467ca89cef7b56ac

    SHA256

    381193a96c0aec47c27f458a5d8a706d131cf358ddf237b674263eed6d7e3c65

    SHA512

    bc6eb136f716ab2128ce31a8a5fde1c2b0498bfbad492c152e4a483bc267e20d17eb5c34977d1dfc9338b8088dfa4c70cad12022d148c1f02019df66d4974bd2

    Download Submit