Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    141s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    13/01/2024, 22:29

General

  • Target

    599340df971b6a1c12e1a3a1c3abdc17.exe

  • Size

    355KB

  • MD5

    599340df971b6a1c12e1a3a1c3abdc17

  • SHA1

    75dfcdebc0b295377c799dd4c3e298c29ba3f4ef

  • SHA256

    6ea381565165a68bd3558b2458a673023e2e1bd46dda3f18d2baad0ca9bb2a8d

  • SHA512

    c5e47fca97ea329fbd2a2aa6d034fa23fb356b7663a021f1fd1acac14c35eba57d8032304027e50825bbb91fe9ca4b0571ed48c022e29bdc8c281cbe14de21b6

  • SSDEEP

    6144:7Qw0WAtKvhICR0U6C6XxfmVD4VQy2/qBDZ3+C/CjqMrsG8C1Ncys5:0w0WAtKZPeRONp2Z3+ejCMZ

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of FindShellTrayWindow 2 IoCs
  • Suspicious use of SendNotifyMessage 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\599340df971b6a1c12e1a3a1c3abdc17.exe
    "C:\Users\Admin\AppData\Local\Temp\599340df971b6a1c12e1a3a1c3abdc17.exe"
    1⤵
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    PID:2032

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2032-0-0x0000000000400000-0x00000000004DB000-memory.dmp

    Filesize

    876KB

  • memory/2032-1-0x00000000001C0000-0x00000000001C1000-memory.dmp

    Filesize

    4KB

  • memory/2032-2-0x0000000000400000-0x00000000004DB000-memory.dmp

    Filesize

    876KB

  • memory/2032-4-0x00000000001C0000-0x00000000001C1000-memory.dmp

    Filesize

    4KB