Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
15s -
max time network
23s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
31/12/2023, 01:47
General
-
Target
234b92bd0ee4379fd3dd3ab0b6b41512.exe
-
Size
200KB
-
MD5
234b92bd0ee4379fd3dd3ab0b6b41512
-
SHA1
2712439da41eabe13bd4937d391c761adeb6a53f
-
SHA256
e3e16c419640b431cece0884125fa8d11295ab018b92b9c7d6e3e16db988b34c
-
SHA512
c67e78fccbf4d0a80af1871664b68c6f6fef4a494383f91e241a3689e39b7f404bf99a332d8e9b59a8cb0f5e3ff017bc2f12b78075b9162177cb98731713f744
-
SSDEEP
3072:OL2LZjJW1StWYOmgnQqRSGqYGfJSZryg0Il3KEJGggLuILLPIRJgJNCiskLe:OKLG15f0gSPvJSZvThGgglIbGCiFLe
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\234b92bd0ee4379fd3dd3ab0b6b41512.exe"C:\Users\Admin\AppData\Local\Temp\234b92bd0ee4379fd3dd3ab0b6b41512.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\234b92bd0ee4379fd3dd3ab0b6b41512.exeC:\Users\Admin\AppData\Local\Temp\234b92bd0ee4379fd3dd3ab0b6b41512.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
200KB
MD5151ad5415214ca6a475319d8f35ef318
SHA11814f9f51b9fd6ba538040fcdac1862b143004b7
SHA256a639ee946c37831fde732f3ee42faca92a6e3caf919ddf4acbc91ef9038501f7
SHA51228326006838ebf3a60dc60a45a533fe09b3da570b13fbbcd306fa2f52444f2a2065206d733a91257d14ec6d4dd1dc8fc37481990ac5a5244e090ac691e501bc1
-
Filesize
304KB
-
Filesize
304KB
-
Filesize
108KB
-
Filesize
304KB
-
Filesize
108KB
-
Filesize
304KB
-
Filesize
304KB
-
Filesize
56KB
-
Filesize
108KB