Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
30/12/2023, 14:11
Static task
static1
Behavioral task
behavioral1
Sample
1b1278f1b300d67595dfaa01b0bbf80a.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1b1278f1b300d67595dfaa01b0bbf80a.exe
Resource
win10v2004-20231215-en
General
-
Target
1b1278f1b300d67595dfaa01b0bbf80a.exe
-
Size
402KB
-
MD5
1b1278f1b300d67595dfaa01b0bbf80a
-
SHA1
a870059696cfea6245951d0e135d2c17385f117e
-
SHA256
15d235895854c4e887c0b35bcb12468b93d6b37b4adb3c3451b76897dd898017
-
SHA512
3b994c7b4df1cd64124633efd7634bfea8207651030b0dfad10c48a425fd1caeb4bbc87790d6f1d3f1092eb9b92f80c7f0b113e7c6d8ff5ccf8e9d4eb04848b9
-
SSDEEP
6144:1Tt0zVZDY2zmr6aL0+aXMUqNU2iMmORtpuSEomltTyhTCEptR:1pqVFzTaaXM162iOPpu+ETOR
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 2316 1b1278f1b300d67595dfaa01b0bbf80a.exe -
Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{9228B103-710E-40E4-C5BC-12E827F7DD0B} 1b1278f1b300d67595dfaa01b0bbf80a.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{9228B103-710E-40E4-C5BC-12E827F7DD0B} \data = "90c7a16694ec451a80a55b6365f7befa" 1b1278f1b300d67595dfaa01b0bbf80a.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
806KB
MD5232aa835b2c28a96e3d4ae48a9aeffbb
SHA13e97355c47f672070810768d1a6cad1792fadfab
SHA2563f3df42d67f102e385450dada3c9ea332dcf0722adf3f4d22356df9baccb3ad1
SHA5129a35242c8596eb2144c2c23f2e5fceba18c38e292da2cc70b01bd9a2f8d028adea91355cfce5b14f53ee2288767f09245b2101367c9e488b400e90e45dd94acb