Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    139s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    07/01/2024, 13:06

General

  • Target

    490fddeeacd5feaf7b2825ff2057109f.exe

  • Size

    242KB

  • MD5

    490fddeeacd5feaf7b2825ff2057109f

  • SHA1

    c7b6ca272cd9af64f63dfdde3c1797c638246cee

  • SHA256

    7d414b6d91b808ae5c3e0a7a7d2213bbeeb47fb7a7118a95d1914afdb2956b63

  • SHA512

    f43b0e3df622ecef59691a32cdc47bedb9d726b35d2d4a123e335d1c1a9dd37f8208a4e42a2534128f424c99e50407478d15f6fb9bf5e3db3fc8dab1923ad8e8

  • SSDEEP

    6144:HqhwF5w6dLu/hRtUA7c50M5izh97qFhijvbbd:YwFA/V5KV5izrqFkbd

Score
6/10

Malware Config

Signatures

  • Drops desktop.ini file(s) 6 IoCs
  • Drops file in Program Files directory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\490fddeeacd5feaf7b2825ff2057109f.exe
    "C:\Users\Admin\AppData\Local\Temp\490fddeeacd5feaf7b2825ff2057109f.exe"
    1⤵
    • Drops desktop.ini file(s)
    • Drops file in Program Files directory
    PID:2072

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\osetup.dll

    Filesize

    5.8MB

    MD5

    c788aa00f7312040680c2b884e1bb563

    SHA1

    23790fbd485c5012be9e4a4c5efcbc5a024d6023

    SHA256

    5f181f15966c4265958ac9beea4e02bb8354d529e61ca47d46a6890892fe6ad7

    SHA512

    1027a02f6ec2ebec03db4c3cb29b39a116c15e2adee468319febfdc240bb9d45a4c39e3bdf5c798314ec3e1cacf3592bacfa1fd7521e631358b793077d93d483

  • C:\Program Files\Java\jdk1.7.0_80\lib\ct.sym

    Filesize

    5B

    MD5

    b5b682b742431a52ea8b17c72ad9c572

    SHA1

    326320f469235708c59f678c9a7357dca552d306

    SHA256

    30d9045a9f172208b13161d1f5204e5787e5e07bfbb4f490d0041b03b7f44f76

    SHA512

    4e1bd7cc616b3115baf6be7ebd29fe2d1123bc0f25464865a0cf9207b0344fba70747a5ce6f00e8d9c696881f6db1e12f81736bc748b6f2b60bf84c681a49163

  • C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\epl-v10.html

    Filesize

    12KB

    MD5

    386b6087dd9575fc6b8ada0f7a463723

    SHA1

    5373d4ffd89438a60b8ae0858c3bc4e8d37f540a

    SHA256

    ef494685ac9644ba5672cfc49c6efe5e09a2d71706d5cf4b57171f7d5f7a70d1

    SHA512

    1d39dd2dd736431ebe0e7f16a9f10b748e522cfee03a187ad020708e48ed676a21eef6b3ac3b1f600cff2e19f1d30ca25f682fe773650b3fc97e20f0afd8557b

  • C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\license.html

    Filesize

    8KB

    MD5

    8ed35e04c7556933d923ee706f8312d7

    SHA1

    15b0c7aae539b756640e9d28e6f68d82bd5b9294

    SHA256

    f2f8e2280b4118ce0ecbf0c58b73fba5e9666f8cdb53fabe8a1fb6fbcd48e2c7

    SHA512

    3f37e8d86d9495f5a5ba4639c2b178d8c3ce0236d4578638630fc901fd4c6d0d40fd3e57e0e28ad9e049295425864a14bf32d1368769e19e749226c5ff84e84b

  • C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\META-INF\eclipse.inf

    Filesize

    62B

    MD5

    f6dbc4b34179e10f9b6c0e2d5d24c2c6

    SHA1

    1c53d71700022886c41b568a9514924fd3c1c62b

    SHA256

    05df06e24037881941804db6ca15f7a25dd10a536b0f642e7a3d09de07256206

    SHA512

    25a2bc555f2e49610a0490377bf687188f7e13931cbd8e29482584e552b65a2e51fe84fa5153825517a011d7b65df831911c302ae482b23fa0b118524e8af24b

  • C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\META-INF\ECLIPSE_.RSA

    Filesize

    7KB

    MD5

    6a922ae3979f4cd80d73e62711c19826

    SHA1

    4cc0a5bf46db54e1c54059394fb9f64b95d4ef69

    SHA256

    9cd780aa41ad06ec2e7f40837e69fa0c02a8f069e51ca8c8622b5e43ab84fb61

    SHA512

    a285f8c0b5deb7a22bfe98c31c1bb44ad2cec3c512b0b0a018c6a8ca51718c6cbd5f805236dcf1c6d6e2b8a8f91d521b1653c055c9d71f67c4de5579047040f3

  • memory/2072-0-0x0000000000400000-0x000000000040B000-memory.dmp

    Filesize

    44KB

  • memory/2072-12-0x0000000000400000-0x000000000040B000-memory.dmp

    Filesize

    44KB

  • memory/2072-1241-0x0000000000400000-0x000000000040B000-memory.dmp

    Filesize

    44KB