Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    361s
  • max time network
    364s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    09/01/2024, 20:06

General

  • Target

    NovAtelApplicationSuite_1-15-0_Windows/NovAtelApplicationSuite_Setup_1-15-0.exe

  • Size

    87.8MB

  • MD5

    d26ef01c6e8cb874343d9640b9a35974

  • SHA1

    af68de6f72cece32926cc06a72ef419cefe4fd02

  • SHA256

    4735f2d42f48f22bf18452ee1c5a284d2487cdc59f49a089ad11cccf818c143d

  • SHA512

    3792523911cbef7ec79609574a7b6c569e899406a950cc0defbace5b27472a724c3a0da44ffce319d77b3d54032b32d0def89fb16e4f6d383370937834537bcd

  • SSDEEP

    1572864:8qKRU+dmvwU/iTBSHM/StaqnY3Bi/zAz9eCtYz5PQtREgKAiA9wC71Yv:8qyUImvBsBSHLABNtYv84

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • Loads dropped DLL 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\NovAtelApplicationSuite_1-15-0_Windows\NovAtelApplicationSuite_Setup_1-15-0.exe
    "C:\Users\Admin\AppData\Local\Temp\NovAtelApplicationSuite_1-15-0_Windows\NovAtelApplicationSuite_Setup_1-15-0.exe"
    1⤵
    • Loads dropped DLL
    PID:1304

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1304-5-0x0000000074CB0000-0x0000000074CB9000-memory.dmp

    Filesize

    36KB