Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
128s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
11/01/2024, 23:31
General
-
Target
54e288ae9c337a9332f73d4236690182.exe
-
Size
2.9MB
-
MD5
54e288ae9c337a9332f73d4236690182
-
SHA1
944ee6d5588c5a7b721f1c61a5e606165170b57f
-
SHA256
22fe519c35b0cae7acdfa93a9a3d0b8c9ca5671458997bfa2380182b3629fb23
-
SHA512
c54f6b202b21bd311fee10eff7c2de1159d0d6db1bdc72d1a30c50739fddf43c5cb91cbc33d5a2ff121d5192ae76c8984bb42eb50f7e3bc327414878c602d784
-
SSDEEP
49152:NqIzGKqOYQ+F8V30qr1dddGHShW/CpHfHqUYJsTP4M338dB2IBlGuuDVUsdxxjek:lznjX+aV351ddwgWWfUYgg3gnl/IVUsn
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
UPX packed file 3 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\54e288ae9c337a9332f73d4236690182.exe"C:\Users\Admin\AppData\Local\Temp\54e288ae9c337a9332f73d4236690182.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\54e288ae9c337a9332f73d4236690182.exeC:\Users\Admin\AppData\Local\Temp\54e288ae9c337a9332f73d4236690182.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.9MB
MD5a38a69fc7deeb74168b5848ad1aa8dcf
SHA155155ccdd9e8f6a120e19fd05a861c61a54ba2ec
SHA256aa4d85459a3cbed2d73139a4f1561df570a164736e2551498ec7c34df901ac9d
SHA51291f029e4f924b6389d2cf6a369a4264df5a182dbbf2a958fbf64f742b6111e8e7d5e16d1cbada0ba9fa0337fbd54e0a7d93ade4f6bfec95f3f8204582e167b17
-
Filesize
4.9MB
-
Filesize
1.2MB
-
Filesize
2.2MB
-
Filesize
2.2MB
-
Filesize
2.1MB
-
Filesize
4.9MB
-
Filesize
4.9MB
-
Filesize
2.2MB
-
Filesize
1.2MB
-
Filesize
4.9MB