Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
142s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
15/01/2024, 05:50
General
-
Target
5c4bda149d2de628286ae87ca424dd54.exe
-
Size
3.4MB
-
MD5
5c4bda149d2de628286ae87ca424dd54
-
SHA1
50476880a68a876ef49022a3316f95e647412156
-
SHA256
87940feda6607f7660227942f65fe3c43424b6eb1e2f03476cea06823cbbd1aa
-
SHA512
c8209f0464e64cabc3c21da4a2a4d22a83eb7bd6cdea47fde8180749e9e30b60d945be4549ba5dd24a386d2792fb279ccd93d905be24b8e4f7df53972a22573f
-
SSDEEP
98304:lZDSTWBhqrajhQ2F8upucqIfFc/8PKyy7rHu6n:LDYyhqmjyRcquFc/TVq6n
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
-
Program crash 1 IoCs
-
Modifies system certificate store 2 TTPs 6 IoCs
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\5c4bda149d2de628286ae87ca424dd54.exe"C:\Users\Admin\AppData\Local\Temp\5c4bda149d2de628286ae87ca424dd54.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Modifies system certificate store
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1244 -s 13682⤵
- Program crash
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD5a266bb7dcc38a562631361bbf61dd11b
SHA13b1efd3a66ea28b16697394703a72ca340a05bd5
SHA256df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e
SHA5120da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc
-
Filesize
304B
MD50725acb7770d8d4621308d88f1cc0c15
SHA101d91184649eeebea8694abf5cf016ba5d1d34e2
SHA2569c6111fa17b4dfa884a3617ca5aac4f74e3d8ca2d31c042f4fb748c96e2fca01
SHA5127a188fe8d1bbbf2d0ee078b5e3bdea5f30ab963305a604e33dc9b9ac480521ec2202a54d09ea4e2736f7ac8f4135132d3966c2d688458adaff1bf6c6bf5dc798
-
Filesize
304B
MD52e20989598b70cb6d16b31654bb2f13f
SHA19508bdf18db92417901c65a98afbf003b4ef39de
SHA256863067aaae04ed5a6b6b745bb9b0c1c1bf0304b087bcb91e463d5de8e65505c8
SHA512e7c31f5c557921e5c37b41d6613e93279a566eb2cabe48c6ebcfee826002f61eb3036028d57d1c0e949c310d32b647491ef71f929e51746ca88d196c40d57c97
-
Filesize
242B
MD5341cfc403874305f929a0b122d3d3140
SHA1682b3af84a8fd77eaa6f467e0bd5b3fc1f0c0ad8
SHA256f624d16b2f3b2ed07aae884488b16bec270063d3692f58abf5fc593ee3d551ec
SHA5122b1e95bcbc5fa02fad5f58d50c5682c74491626dae1f863f7e0438fc75084b81c30e96819df8b76fb1539f7f1b0e5a612ea60bf868be3f38644a7fa1f43ec0ab
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
171KB
MD59c0c641c06238516f27941aa1166d427
SHA164cd549fb8cf014fcd9312aa7a5b023847b6c977
SHA2564276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f
SHA512936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06
-
Filesize
328KB
-
Filesize
92KB
-
Filesize
5.7MB
-
Filesize
5.7MB
-
Filesize
348KB
-
Filesize
36KB
-
Filesize
284KB
-
Filesize
688KB
-
Filesize
284KB
-
Filesize
288KB
-
Filesize
4KB
-
Filesize
6.9MB
-
Filesize
5.7MB
-
Filesize
512KB
-
Filesize
572KB
-
Filesize
1.4MB
-
Filesize
12.3MB
-
Filesize
1.6MB
-
Filesize
256KB
-
Filesize
92KB
-
Filesize
264KB
-
Filesize
88KB
-
Filesize
1.6MB
-
Filesize
80KB
-
Filesize
1.3MB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
84KB
-
Filesize
112KB
-
Filesize
272KB
-
Filesize
156KB
-
Filesize
100KB
-
Filesize
48KB
-
Filesize
352KB
-
Filesize
316KB
-
Filesize
100KB
-
Filesize
52KB
-
Filesize
212KB
-
Filesize
5.7MB
-
Filesize
5.7MB
-
Filesize
296KB
-
Filesize
48KB
-
Filesize
72KB
-
Filesize
1.1MB
-
Filesize
224KB
-
Filesize
112KB
-
Filesize
276KB
-
Filesize
92KB
-
Filesize
44KB
-
Filesize
244KB
-
Filesize
88KB
-
Filesize
72KB
-
Filesize
5.7MB
-
Filesize
56KB
-
Filesize
84KB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
72KB
-
Filesize
284KB
-
Filesize
72KB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
72KB
-
Filesize
1.6MB
-
Filesize
288KB
-
Filesize
72KB
-
Filesize
1.6MB
-
Filesize
288KB
-
Filesize
6.9MB
-
Filesize
296KB
-
Filesize
1.4MB
-
Filesize
6.9MB
-
Filesize
12KB
-
Filesize
980KB
-
Filesize
256KB
-
Filesize
500KB
-
Filesize
348KB
-
Filesize
48KB
-
Filesize
100KB
-
Filesize
688KB
-
Filesize
284KB
-
Filesize
5.7MB
-
Filesize
1.1MB