Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
44s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
03/01/2024, 22:14
General
-
Target
3f285fffaf64df2ea3f154e4f6c94296.exe
-
Size
2.7MB
-
MD5
3f285fffaf64df2ea3f154e4f6c94296
-
SHA1
13a68ff0c9f9788cbb0c3aaaa8461373a80bd4ff
-
SHA256
0cd3146a2a4b6dad0b79284623d05af5f34a36998eec71c55b68b6872194f81c
-
SHA512
7e755ca9227713ed0bc4a697d238e3945fb3894f965d2c9da9756f5d8b657cfd90d2dfee68d88719765ff3a50764abc07d4222704fdf8ccd8eb6da789449da4d
-
SSDEEP
49152:GzGbxIP39IgDQeJCRcIVtAcZl1gWv8DfDlnGM7h6gaU6VDOLm2SoKwf8xMTHEqik:y39LR9IrAogWv8hGM7hBzm2SoZTHEqUE
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 2 IoCs
-
Drops file in System32 directory 2 IoCs
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3f285fffaf64df2ea3f154e4f6c94296.exe"C:\Users\Admin\AppData\Local\Temp\3f285fffaf64df2ea3f154e4f6c94296.exe"1⤵
- Adds Run key to start application
- Drops file in System32 directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
18.7MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
18.7MB
-
Filesize
4KB
-
Filesize
18.7MB