Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
07/01/2024, 02:15
General
-
Target
448463e39da7bf04538b49b24c83cec4.exe
-
Size
5.8MB
-
MD5
448463e39da7bf04538b49b24c83cec4
-
SHA1
828bacfe81089ca5f6110cb9aac6072ba18b1650
-
SHA256
7e3baa441beef8e255053a9047ae2a1b39a348db32991422aa7f8e0d9d32dd87
-
SHA512
cc8fe488d8c0c851830d769819096da20a798cc016195e5a8369ab0de893ebfb33323aa1bafa991658a6cfb3894cb8ee444db5042e6965f9d23252f45106e3da
-
SSDEEP
98304:ib6F42gSfTGgg3gnl/IVUs1jePsswgVhUuLBl0Jf1igg3gnl/IVUs1jePs:ib6G2b+gl/iBiP1dCcf03mgl/iBiP
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\448463e39da7bf04538b49b24c83cec4.exe"C:\Users\Admin\AppData\Local\Temp\448463e39da7bf04538b49b24c83cec4.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\448463e39da7bf04538b49b24c83cec4.exeC:\Users\Admin\AppData\Local\Temp\448463e39da7bf04538b49b24c83cec4.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.2MB
-
Filesize
4.9MB
-
Filesize
2.1MB
-
Filesize
2.2MB
-
Filesize
1.2MB
-
Filesize
4.9MB
-
Filesize
4.9MB
-
Filesize
1.2MB
-
Filesize
2.2MB
-
Filesize
4.9MB
-
Filesize
2.2MB