Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

4ec2486825...b1.exe

windows7-x64

7

4ec2486825...b1.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    118s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    09/01/2024, 16:08

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    4ec2486825014dee1470c86e7b0285b1.exe

  • Size

    297KB

  • MD5

    4ec2486825014dee1470c86e7b0285b1

  • SHA1

    fc1c660abff0898ded42ae051f9e593087a4e350

  • SHA256

    eac00b17869b0c329bd13d2aff0f33d0105ef6ba02062cdcc9a077e3b52d7902

  • SHA512

    76b3d234a713de8e6ce6030d1c2e56eb9b8055c8eb5f68f8de67f625f8409b4774fbc336d80a0daa3bedda602104b33397cae90c694724027fa570db1e28f134

  • SSDEEP

    6144:OgsX5w78W1xrLitFHIp1TP6IUIJxgSQZf3AEfk3COjB8tgnFKzEsTh5/V1lj:OgU5w7dxv6FH6l6IUFvA0iCOV8tWM7T9

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\4ec2486825014dee1470c86e7b0285b1.exe
    "C:\Users\Admin\AppData\Local\Temp\4ec2486825014dee1470c86e7b0285b1.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: GetForegroundWindowSpam
    PID:2652

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\TsuD8AEF70A.dll
    Filesize

    267KB

    MD5

    138810868216da6c31f1c3faa4e3ff4c

    SHA1

    076f99ef5a4a6c3f32b9ab282de0b66b49afd860

    SHA256

    23f073d05ef6165f38dd5b438d04131f4b95544f1c19ce8230f3ddd1dfe58dce

    SHA512

    e7eea1a8bd66a4e1e91229d31afde034af7be881603e608171ca37e5802eb726be31c23d46af5538f408c01db7687768e04ec056512fd8afb2d979676ad25c3c

    Download Submit

  • \Users\Admin\AppData\Local\Temp\{C46FD558-375A-A332-41D9-7F781F8CF7AE}\_Setup.dll
    Filesize

    206KB

    MD5

    a86aa410fb6cec9f140fb7fd12882be9

    SHA1

    c79c4159ad05ee31aeef9b6bbd505d96f41e1fac

    SHA256

    a3903f89d8eef0cc9c365a2db4fca0ca1f0654390f182b44e7769454c1aab974

    SHA512

    70d689077d29ba8138968551b87be405db42c05b547ef36217bc64b548bb41a281086cf02828b9cbd8925e2fda598606c41129b8fd3c7f2e0b630b4188ea800e

    Download Submit

  • \Users\Admin\AppData\Local\Temp\{C46FD558-375A-A332-41D9-7F781F8CF7AE}\_Setupx.dll
    Filesize

    42KB

    MD5

    66e0d3cb3825b658880be576875795bc

    SHA1

    740982ce3b3e4bd08c1cbd5fc8cfeb982f1d4e05

    SHA256

    27b7921fbbd360bf77db65a50b2cd9a600e6baaaf77fd60eee74476d9fc6c7e0

    SHA512

    23873b2052f66d3b5961cfd5ca26d4d3f507cbd0317116e6b773d23defe47c164e1040fb56392f17cd2644528c64dfbfdeccc46e1965a650786414c8f8f74c7b

    Download Submit