Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
09/01/2024, 19:38
General
-
Target
56c30dff65d66b2e7d9494be67e7fbf838b0f46c8323282c8f93e4e8ff19aeb3.exe
-
Size
2.7MB
-
MD5
8cf2dfd87af3a84ec14bb8ad3bc64759
-
SHA1
ecdbf23210e36c9c1b74f308fc2cc58559e4f121
-
SHA256
56c30dff65d66b2e7d9494be67e7fbf838b0f46c8323282c8f93e4e8ff19aeb3
-
SHA512
9ab99bdf188942f6d10f0479008b1eccec86ae59e8e6757e83a0d8e7051aae9565b4e028305620cda0144809599316ba78bec8780aa5aaa42ceb65ee7f057ca9
-
SSDEEP
49152:Flks4A6lVLX6Sc60FNUFFIIsTp69FlNN7boFvH6u//zHWwhXPwMQ9i9ZMW/KMZKv:/n6r6+0FUFIIsTY9Fl/7boFi+qwZPwMU
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
-
Loads dropped DLL 1 IoCs
-
UPX packed file 3 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\56c30dff65d66b2e7d9494be67e7fbf838b0f46c8323282c8f93e4e8ff19aeb3.exe"C:\Users\Admin\AppData\Local\Temp\56c30dff65d66b2e7d9494be67e7fbf838b0f46c8323282c8f93e4e8ff19aeb3.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
45KB
MD5d8939a7b6ee94456dfb54aeb1bb11a15
SHA1da54c594f9797fba9a7ca0dd9f30c3c9cc7469c3
SHA256ed12e46c87e2fc802a12d2bc1a90f8e0e6c7468f4ec5c0e26454031a4be838d9
SHA512aed1c1e2a8caef845887d48c8ac25f6f29d721aaaba14fd5593fa9977d1ef27f777982bb4921ce438618523cd291b55101e3b0354f1941e2708497e6a237a06f
-
Filesize
192KB
-
Filesize
2.7MB
-
Filesize
192KB
-
Filesize
2.7MB