Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 05:48

General

  • Target

    2aa2773907c7589704fe5af884702232.exe

  • Size

    1.1MB

  • MD5

    2aa2773907c7589704fe5af884702232

  • SHA1

    43407bad946db1d4eed4d69455377ea868647082

  • SHA256

    24a1531af0a4cd3e5906871c4b590c5ecc7c575c3e1628cdf943331c05a1bfd0

  • SHA512

    fb2de436ff0a77f8cc96d83479e6ae13f058a4e9de51d2d6fdbdd48c4fd193e7e4d32484f0b4efa01c5b8b7daabea2ea795ce23a265fdb13341baacacef8fb9b

  • SSDEEP

    24576:rWvknOMEdnSj8ZcGBaAfnsMpTdEA6Ov8qB6Rnuts8QrnKK:rUeOMcR2GBPnigN9C8KKK

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 4 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies Internet Explorer settings 1 TTPs 9 IoCs
  • Suspicious use of WriteProcessMemory 7 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\a26cB0R2Pw\XpqhE3cP\Setup.exe
    C:\Users\Admin\AppData\Local\Temp\a26cB0R2Pw\XpqhE3cP\Setup.exe --relaunch
    1⤵
    • Executes dropped EXE
    • Loads dropped DLL
    • Modifies Internet Explorer settings
    PID:2968
  • C:\Users\Admin\AppData\Local\Temp\2aa2773907c7589704fe5af884702232.exe
    "C:\Users\Admin\AppData\Local\Temp\2aa2773907c7589704fe5af884702232.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:2948

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2948-1-0x0000000001CD0000-0x0000000001DCE000-memory.dmp

    Filesize

    1016KB

  • memory/2948-9-0x0000000000400000-0x0000000000520000-memory.dmp

    Filesize

    1.1MB

  • memory/2948-13-0x0000000001CD0000-0x0000000001DCE000-memory.dmp

    Filesize

    1016KB

  • memory/2948-25-0x0000000001CD0000-0x0000000001DCE000-memory.dmp

    Filesize

    1016KB

  • memory/2948-34-0x0000000001CD0000-0x0000000001DCE000-memory.dmp

    Filesize

    1016KB

  • memory/2948-41-0x0000000001CD0000-0x0000000001DCE000-memory.dmp

    Filesize

    1016KB

  • memory/2948-48-0x0000000001CD0000-0x0000000001DCE000-memory.dmp

    Filesize

    1016KB

  • memory/2948-55-0x0000000077280000-0x0000000077390000-memory.dmp

    Filesize

    1.1MB

  • memory/2948-66-0x0000000001CD0000-0x0000000001DCE000-memory.dmp

    Filesize

    1016KB

  • memory/2948-65-0x0000000001CD0000-0x0000000001DCE000-memory.dmp

    Filesize

    1016KB

  • memory/2948-64-0x0000000001CD0000-0x0000000001DCE000-memory.dmp

    Filesize

    1016KB

  • memory/2948-63-0x0000000001CD0000-0x0000000001DCE000-memory.dmp

    Filesize

    1016KB

  • memory/2948-62-0x0000000001CD0000-0x0000000001DCE000-memory.dmp

    Filesize

    1016KB

  • memory/2948-61-0x0000000001CD0000-0x0000000001DCE000-memory.dmp

    Filesize

    1016KB

  • memory/2948-60-0x0000000001CD0000-0x0000000001DCE000-memory.dmp

    Filesize

    1016KB

  • memory/2948-59-0x0000000001CD0000-0x0000000001DCE000-memory.dmp

    Filesize

    1016KB

  • memory/2948-204-0x0000000001CD0000-0x0000000001DCE000-memory.dmp

    Filesize

    1016KB

  • memory/2948-58-0x0000000001CD0000-0x0000000001DCE000-memory.dmp

    Filesize

    1016KB

  • memory/2948-57-0x0000000001CD0000-0x0000000001DCE000-memory.dmp

    Filesize

    1016KB

  • memory/2948-56-0x0000000001CD0000-0x0000000001DCE000-memory.dmp

    Filesize

    1016KB

  • memory/2948-54-0x0000000001CD0000-0x0000000001DCE000-memory.dmp

    Filesize

    1016KB

  • memory/2948-53-0x0000000001CD0000-0x0000000001DCE000-memory.dmp

    Filesize

    1016KB

  • memory/2948-52-0x0000000001CD0000-0x0000000001DCE000-memory.dmp

    Filesize

    1016KB

  • memory/2948-51-0x0000000001CD0000-0x0000000001DCE000-memory.dmp

    Filesize

    1016KB

  • memory/2948-50-0x0000000001CD0000-0x0000000001DCE000-memory.dmp

    Filesize

    1016KB

  • memory/2948-49-0x0000000001CD0000-0x0000000001DCE000-memory.dmp

    Filesize

    1016KB

  • memory/2948-47-0x0000000001CD0000-0x0000000001DCE000-memory.dmp

    Filesize

    1016KB

  • memory/2948-46-0x0000000001CD0000-0x0000000001DCE000-memory.dmp

    Filesize

    1016KB

  • memory/2948-45-0x0000000001CD0000-0x0000000001DCE000-memory.dmp

    Filesize

    1016KB

  • memory/2948-44-0x0000000001CD0000-0x0000000001DCE000-memory.dmp

    Filesize

    1016KB

  • memory/2948-42-0x0000000001CD0000-0x0000000001DCE000-memory.dmp

    Filesize

    1016KB

  • memory/2948-43-0x0000000001CD0000-0x0000000001DCE000-memory.dmp

    Filesize

    1016KB

  • memory/2948-40-0x0000000001CD0000-0x0000000001DCE000-memory.dmp

    Filesize

    1016KB

  • memory/2948-39-0x0000000001CD0000-0x0000000001DCE000-memory.dmp

    Filesize

    1016KB

  • memory/2948-38-0x0000000001CD0000-0x0000000001DCE000-memory.dmp

    Filesize

    1016KB

  • memory/2948-37-0x0000000001CD0000-0x0000000001DCE000-memory.dmp

    Filesize

    1016KB

  • memory/2948-36-0x0000000001CD0000-0x0000000001DCE000-memory.dmp

    Filesize

    1016KB

  • memory/2948-35-0x0000000001CD0000-0x0000000001DCE000-memory.dmp

    Filesize

    1016KB

  • memory/2948-33-0x0000000001CD0000-0x0000000001DCE000-memory.dmp

    Filesize

    1016KB

  • memory/2948-32-0x0000000001CD0000-0x0000000001DCE000-memory.dmp

    Filesize

    1016KB

  • memory/2948-31-0x0000000001CD0000-0x0000000001DCE000-memory.dmp

    Filesize

    1016KB

  • memory/2948-30-0x0000000001CD0000-0x0000000001DCE000-memory.dmp

    Filesize

    1016KB

  • memory/2948-29-0x0000000001CD0000-0x0000000001DCE000-memory.dmp

    Filesize

    1016KB

  • memory/2948-28-0x0000000001CD0000-0x0000000001DCE000-memory.dmp

    Filesize

    1016KB

  • memory/2948-27-0x0000000001CD0000-0x0000000001DCE000-memory.dmp

    Filesize

    1016KB

  • memory/2948-26-0x0000000001CD0000-0x0000000001DCE000-memory.dmp

    Filesize

    1016KB

  • memory/2948-24-0x0000000001CD0000-0x0000000001DCE000-memory.dmp

    Filesize

    1016KB

  • memory/2948-23-0x0000000001CD0000-0x0000000001DCE000-memory.dmp

    Filesize

    1016KB

  • memory/2948-22-0x0000000001CD0000-0x0000000001DCE000-memory.dmp

    Filesize

    1016KB

  • memory/2948-21-0x0000000001CD0000-0x0000000001DCE000-memory.dmp

    Filesize

    1016KB

  • memory/2948-20-0x0000000001CD0000-0x0000000001DCE000-memory.dmp

    Filesize

    1016KB

  • memory/2948-18-0x0000000001CD0000-0x0000000001DCE000-memory.dmp

    Filesize

    1016KB

  • memory/2948-19-0x0000000001CD0000-0x0000000001DCE000-memory.dmp

    Filesize

    1016KB

  • memory/2948-17-0x0000000001CD0000-0x0000000001DCE000-memory.dmp

    Filesize

    1016KB

  • memory/2948-16-0x0000000001CD0000-0x0000000001DCE000-memory.dmp

    Filesize

    1016KB

  • memory/2948-15-0x0000000001CD0000-0x0000000001DCE000-memory.dmp

    Filesize

    1016KB

  • memory/2948-14-0x0000000001CD0000-0x0000000001DCE000-memory.dmp

    Filesize

    1016KB

  • memory/2948-12-0x0000000001CD0000-0x0000000001DCE000-memory.dmp

    Filesize

    1016KB

  • memory/2948-11-0x0000000001CD0000-0x0000000001DCE000-memory.dmp

    Filesize

    1016KB

  • memory/2948-10-0x0000000001CD0000-0x0000000001DCE000-memory.dmp

    Filesize

    1016KB

  • memory/2948-8-0x0000000001CD0000-0x0000000001DCE000-memory.dmp

    Filesize

    1016KB

  • memory/2948-7-0x0000000000400000-0x0000000000520000-memory.dmp

    Filesize

    1.1MB

  • memory/2948-6-0x0000000001CD0000-0x0000000001DCE000-memory.dmp

    Filesize

    1016KB

  • memory/2948-0-0x0000000001CD0000-0x0000000001DCE000-memory.dmp

    Filesize

    1016KB

  • memory/2948-856-0x0000000077280000-0x0000000077390000-memory.dmp

    Filesize

    1.1MB

  • memory/2948-857-0x0000000001CD0000-0x0000000001DCE000-memory.dmp

    Filesize

    1016KB

  • memory/2968-628-0x00000000022B0000-0x00000000023AE000-memory.dmp

    Filesize

    1016KB

  • memory/2968-847-0x00000000022B0000-0x00000000023AE000-memory.dmp

    Filesize

    1016KB