Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
141s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
10/01/2024, 12:54
General
-
Target
529d640c1be3aa112ffb9201425e497a13676309ca2c4f599b1165ae8c38d5a9.exe
-
Size
1.6MB
-
MD5
6284ab07de4d18bd276ea69e0961f4a5
-
SHA1
6813fcfc36d3b62e3ba8eb0c7731df11583703a6
-
SHA256
529d640c1be3aa112ffb9201425e497a13676309ca2c4f599b1165ae8c38d5a9
-
SHA512
b543711bf8f93405980657584e108b7be56cc137a2947a73bdfc87f5c6226f10df72c88377367c8b2a573afcd8e182df6f8b7f3ccae489660d931bcd37129cbb
-
SSDEEP
24576:s7FUDowAyrTVE3U5F/dSeKic6QL3E2vVsjECUAQT45deRV9RA:sBuZrEUYeKIy029s4C1eH9u
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of WriteProcessMemory 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\529d640c1be3aa112ffb9201425e497a13676309ca2c4f599b1165ae8c38d5a9.exe"C:\Users\Admin\AppData\Local\Temp\529d640c1be3aa112ffb9201425e497a13676309ca2c4f599b1165ae8c38d5a9.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\is-793J8.tmp\529d640c1be3aa112ffb9201425e497a13676309ca2c4f599b1165ae8c38d5a9.tmp"C:\Users\Admin\AppData\Local\Temp\is-793J8.tmp\529d640c1be3aa112ffb9201425e497a13676309ca2c4f599b1165ae8c38d5a9.tmp" /SL5="$400F4,832512,832512,C:\Users\Admin\AppData\Local\Temp\529d640c1be3aa112ffb9201425e497a13676309ca2c4f599b1165ae8c38d5a9.exe"2⤵
- Executes dropped EXE
- Suspicious behavior: GetForegroundWindowSpam
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.3MB
MD568444dd7083745198051643ba5b9c2f1
SHA1fe378b6b4b02e1471b0472a8f447214e44ecc306
SHA256a3e8b16d3356d76e3ebe99019d3fa354329a34a6a3fac6e703ec0452b5d54b58
SHA512998d3c20155ae69c4b546f1ada03afd9f0cc2c6df08468b0cb0146fe355bd1f366a5ccb6613bf133d753ab1aecd5648ee065c05121ba32bda9a8c7628f7b291d
-
Filesize
2.0MB
MD5b9ab5fd2f88d296b2c2bef26d20bce76
SHA14c6193317f24805d4378a5be0df40d9336b031b8
SHA256d19549947984ee7fd0a84a75f744eae7432ef6a9b1da91e8a78ce519127014dc
SHA51273d9a2ea41ff0df4fb3737301ead9bbe16c9d281aa2a8aa572d6267d2bb7442a57304250ec1be4b7578f423176e44e45869798a4e7d03b16a06066014da30431
-
Filesize
864KB
-
Filesize
864KB
-
Filesize
4KB
-
Filesize
3.1MB
-
Filesize
4KB