Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    05/01/2024, 11:02

General

  • Target

    setup.exe

  • Size

    4.0MB

  • MD5

    faf0fe56ac05d3f5a2b8748dd8b762cf

  • SHA1

    c2284e83ae61d061f7eea6cf0a7b625ad9928a2f

  • SHA256

    672a905069b8d03d2553454dc864a3b834998fc6253868b9b2c3126d962ae1d7

  • SHA512

    6aa42f0e7687c9f8bdeb5276469a6fed461b05ea870eecb228c8371de440dd1236f07435c4de67c1f770f6df529b1ab01ebfae07df6aeed7cbf938506777a934

  • SSDEEP

    98304:sXD1f4HZARBj7/1lOuRCRYGJelWMgEDWPw34GJrzn:WuSj7dVRiYGfwZDJ/

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\setup.exe
    "C:\Users\Admin\AppData\Local\Temp\setup.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: GetForegroundWindowSpam
    PID:2652

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\nsi89A.tmp\ioSpecial.ini

    Filesize

    703B

    MD5

    25d76e4e1cfea53ce519af6e852bc444

    SHA1

    d4213484c5c5fe8e692c0f91ed68bfae85c29441

    SHA256

    5e40ad11e74af162a345712e52ec16fe79c4fe7017f663e165d3feaa3b8c5872

    SHA512

    fa725b7917ee7ec034a75cf53f235c181f3c98ca81791730d018ab76f8e0659431e90370319164e4f7c7f745a1a4406a2841ccacc49de1cfd43b62535d668bfd

  • \Users\Admin\AppData\Local\Temp\nsi89A.tmp\InstallOptions.dll

    Filesize

    12KB

    MD5

    9aff00ec14e6cb71a13451011c580077

    SHA1

    5972140e4a0addb9eac685fe6037da7479f23ecf

    SHA256

    cc8145683ad8fd77bd5cca193e84188e40d6d03a0a0d1d00e2bdbef91be96bb3

    SHA512

    311abd4e9927c1424d794ba401f3935ad3b108a2124e58e0d29aa946514c7a1d62b9b08b013699f4f90796bdfb6c07211daddbb521c1d20ccee771f6ea43b110