Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
129s -
max time network
141s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
09/01/2024, 03:17
Static task
static1
Behavioral task
behavioral1
Sample
b453a6aedb4089fc89f46b910d1c93f5f103a853595778dee71fa665bca8e5fc.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
b453a6aedb4089fc89f46b910d1c93f5f103a853595778dee71fa665bca8e5fc.exe
Resource
win10v2004-20231222-en
General
-
Target
b453a6aedb4089fc89f46b910d1c93f5f103a853595778dee71fa665bca8e5fc.exe
-
Size
4.8MB
-
MD5
9eae500d705040d284ce3d8796afd8f1
-
SHA1
8b90034bb017e608b8e2dc8183ddfde06c485e9d
-
SHA256
b453a6aedb4089fc89f46b910d1c93f5f103a853595778dee71fa665bca8e5fc
-
SHA512
88cb78f0f68e7b51f92a9b445e12931907f8581b33e36cec5d56668c516ab065309dc7fa532d91ed6304c0b5ceaf4232dc58f0949cc5d0074cd32c461b380579
-
SSDEEP
98304:seLpmrmc2lAu28lkcf5YjovKqGYiOE8oLj5YINfSyo8aX7:TcmZl85gyjovK65E8ob5Sx8aX7
Malware Config
Signatures
-
Loads dropped DLL 3 IoCs
pid Process 1616 b453a6aedb4089fc89f46b910d1c93f5f103a853595778dee71fa665bca8e5fc.exe 1616 b453a6aedb4089fc89f46b910d1c93f5f103a853595778dee71fa665bca8e5fc.exe 1616 b453a6aedb4089fc89f46b910d1c93f5f103a853595778dee71fa665bca8e5fc.exe -
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
description ioc Process File opened for modification \??\PhysicalDrive0 b453a6aedb4089fc89f46b910d1c93f5f103a853595778dee71fa665bca8e5fc.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
234KB
MD5cd03029957ebc78c0ca7a6c02a9ca846
SHA10044114b8073781479044f0294701be9611be2ac
SHA256139fdd92e6ddf1aac0761a68502b374daa32e82039621018511dc491ed9b4048
SHA51214c641cb9536def0ddc1969d50b97b83a23017c97373e3ad74d3fbf9825ac81f3fdf8169281c8ad4cebd45d9c9ae05f752d553ba4653e620889b274479cb7c32
-
Filesize
442KB
MD5c947e7fa5a1b89d98dc8b4a9b9d8716d
SHA1fa3940950eb7779220c5a955b3618f1a71d65bcb
SHA256df70f31a67fee7f3a06949655bc8232e4bbbc5acd81d202f3bc459f79f34c005
SHA5121c2e498e92fa93163afccb2dfedcd1d1e756eeb81ebc71b3ae8d1b9e27ccd99764a69f1abed2ffd75652bb7254d4df89213529553e972447ab1cab20a35faf47
-
Filesize
416KB
MD5fbd81c00892bd0f5aaa98b710f918540
SHA1384e57cd67254295278085cad2a6a69b807a3f6d
SHA2564c9b56bb05b2a7504e08b49b8d58fc72d0e1096b7e7edc2aef89796a7d66816f
SHA5123a72ef21f4899a64c22918d19ecb69ed5a254269b8bf29704f47c51393e525a84171a7c98191fea4b3959f91c35cf265f408777f528a79d16a8352d4219e6f05