Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
08/01/2024, 12:38
General
-
Target
4b75aa4b3e106ac8f0cb6d90ae50fd77.exe
-
Size
4.8MB
-
MD5
4b75aa4b3e106ac8f0cb6d90ae50fd77
-
SHA1
ecb22b7708ad8bd06b411c3736736d601d59ec71
-
SHA256
944522347b3a3e48b075b6ee424fa2be8658fb20a85d6b3ee2ed0fe328f9ea1c
-
SHA512
3c1cf7fa816257f7908dc80a210f6d0440b85a669c384791a6f743b198f37084758230780c80788e44187f0b4d0c068c0d2373060a45f4f6718a029c2e1fddbd
-
SSDEEP
98304:VPl5fW9vz2isRgg3gnl/IVUs1j7h4Sd8ZxC4J/9/tax3hgg3gnl/IVUs1jr:V/O9L2iogl/iBxTAZ9Yxngl/iBP
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\4b75aa4b3e106ac8f0cb6d90ae50fd77.exe"C:\Users\Admin\AppData\Local\Temp\4b75aa4b3e106ac8f0cb6d90ae50fd77.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\4b75aa4b3e106ac8f0cb6d90ae50fd77.exeC:\Users\Admin\AppData\Local\Temp\4b75aa4b3e106ac8f0cb6d90ae50fd77.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.2MB
-
Filesize
1.2MB
-
Filesize
4.9MB
-
Filesize
4.9MB
-
Filesize
2.2MB
-
Filesize
4.9MB
-
Filesize
4.9MB
-
Filesize
2.1MB
-
Filesize
2.2MB
-
Filesize
1.2MB
-
Filesize
2.2MB
-
Filesize
4.9MB