Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
143s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
11/01/2024, 11:18
Static task
static1
Behavioral task
behavioral1
Sample
535fcdf7d80f74f1230a9c890b422c2e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
535fcdf7d80f74f1230a9c890b422c2e.exe
Resource
win10v2004-20231222-en
General
-
Target
535fcdf7d80f74f1230a9c890b422c2e.exe
-
Size
869KB
-
MD5
535fcdf7d80f74f1230a9c890b422c2e
-
SHA1
0a6b1860ed1a3587e9da468a8877e59eb60b3fd1
-
SHA256
77b9b21c3349716bd9655e7f8f7f6841d96a00261f660b0b66e840cfe58905ab
-
SHA512
37ab11c35df35c0a49b7678daa1c750d474b2314478fdc7736b5bda5df6d4a3e006dfb821f5459862d1d2d68c042785d6808e29fc638488442fc579b85a2a494
-
SSDEEP
24576:njOwWeegy4mh3ujUw4z9zBBVKxkyP/s1DE:nj6VXajUpVBmkyM1
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
pid Process 2328 bbs.exe -
Loads dropped DLL 2 IoCs
pid Process 2988 535fcdf7d80f74f1230a9c890b422c2e.exe 2988 535fcdf7d80f74f1230a9c890b422c2e.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2988 wrote to memory of 2328 2988 535fcdf7d80f74f1230a9c890b422c2e.exe 28 PID 2988 wrote to memory of 2328 2988 535fcdf7d80f74f1230a9c890b422c2e.exe 28 PID 2988 wrote to memory of 2328 2988 535fcdf7d80f74f1230a9c890b422c2e.exe 28 PID 2988 wrote to memory of 2328 2988 535fcdf7d80f74f1230a9c890b422c2e.exe 28
Processes
-
C:\Users\Admin\AppData\Local\Temp\535fcdf7d80f74f1230a9c890b422c2e.exe"C:\Users\Admin\AppData\Local\Temp\535fcdf7d80f74f1230a9c890b422c2e.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:2988 -
C:\Users\Admin\AppData\Local\Temp\bbs.exe"C:\Users\Admin\AppData\Local\Temp\bbs.exe"2⤵
- Executes dropped EXE
PID:2328
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
51KB
MD59e35c4e31a403055820a381cb00b57f9
SHA16368a0064bfe8dc8b336f22d83ab667f2e671b2d
SHA256da544b0414ed25cf6e365a7086d6f0dc2a2c3043450d79002c3c503aaaa62914
SHA5124e0ff2cc0681d592ff371f7de0850989226bba89c7671e022fffffc434cf14a80775186d272e1b35808b046a667d4dd8e74d98116eac622e1b5ec0cee85d02a2