Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

23/01/2024, 20:35

240123-zc188ahfb7 1

18/01/2024, 14:17

240118-rl28wadbh2 7

18/01/2024, 14:15

240118-rkxl1acefl 1

Analysis

  • max time kernel
    0s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    18/01/2024, 14:17

General

  • Target

    Запит документів/Запит документів.part1.rar

  • Size

    30KB

  • MD5

    d7129480ce2bbc53a6da756cfa71aefc

  • SHA1

    75e170bcc30461a25815a7f34cd9d514d2c5691a

  • SHA256

    d47694c0f3b49ae16b9f02f41268e4ee780c1cc6b43a11ed3795362e6d61aa26

  • SHA512

    e4854bdfe102967ae2cb9d404a4975bbd91634dccef7dd5858fd10cddf44dfccea2f0dee3d17104360cb52efc6baa207972159a709a1d5b853b9d580c3b567e9

  • SSDEEP

    768:CRhLwthnYO9bOy2JxP66QxD9uRNaoqwNf9JsqSPvU:CDwthY/zOD9cN5tNDsq0

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    "C:\Windows\system32\rundll32.exe" C:\Windows\system32\shell32.dll,OpenAs_RunDLL C:\Users\Admin\AppData\Local\Temp\Запит документів\Запит документів.part1.rar
    1⤵
      PID:2684
      • C:\Program Files\VideoLAN\VLC\vlc.exe
        "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Запит документів\Запит документів.part1.rar"
        2⤵
          PID:2148
      • C:\Windows\system32\cmd.exe
        cmd /c "C:\Users\Admin\AppData\Local\Temp\Запит документів\Запит документів.part1.rar"
        1⤵
        • Suspicious use of WriteProcessMemory
        PID:2956

      Network

      MITRE ATT&CK Enterprise v15

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/2148-30-0x000007FEFB170000-0x000007FEFB1A4000-memory.dmp

        Filesize

        208KB

      • memory/2148-37-0x000007FEF6CD0000-0x000007FEF6CED000-memory.dmp

        Filesize

        116KB

      • memory/2148-39-0x000007FEF60C0000-0x000007FEF62C0000-memory.dmp

        Filesize

        2.0MB

      • memory/2148-38-0x000007FEF6CB0000-0x000007FEF6CC1000-memory.dmp

        Filesize

        68KB

      • memory/2148-36-0x000007FEF6CF0000-0x000007FEF6D01000-memory.dmp

        Filesize

        68KB

      • memory/2148-51-0x000007FEF4E90000-0x000007FEF4EF7000-memory.dmp

        Filesize

        412KB

      • memory/2148-52-0x000007FEF4E20000-0x000007FEF4E8F000-memory.dmp

        Filesize

        444KB

      • memory/2148-63-0x000007FEF4C40000-0x000007FEF4C52000-memory.dmp

        Filesize

        72KB

      • memory/2148-66-0x000007FEF4910000-0x000007FEF4AC2000-memory.dmp

        Filesize

        1.7MB

      • memory/2148-71-0x000007FEF4590000-0x000007FEF47C1000-memory.dmp

        Filesize

        2.2MB

      • memory/2148-79-0x000007FEF4310000-0x000007FEF4323000-memory.dmp

        Filesize

        76KB

      • memory/2148-90-0x000007FEF4030000-0x000007FEF4042000-memory.dmp

        Filesize

        72KB

      • memory/2148-92-0x000007FEF3FF0000-0x000007FEF4001000-memory.dmp

        Filesize

        68KB

      • memory/2148-91-0x000007FEF4010000-0x000007FEF4021000-memory.dmp

        Filesize

        68KB

      • memory/2148-89-0x000007FEF4050000-0x000007FEF4079000-memory.dmp

        Filesize

        164KB

      • memory/2148-88-0x000007FEF4080000-0x000007FEF4096000-memory.dmp

        Filesize

        88KB

      • memory/2148-87-0x000007FEF40A0000-0x000007FEF40B8000-memory.dmp

        Filesize

        96KB

      • memory/2148-86-0x000007FEF40C0000-0x000007FEF40D2000-memory.dmp

        Filesize

        72KB

      • memory/2148-85-0x000007FEF40E0000-0x000007FEF40F1000-memory.dmp

        Filesize

        68KB

      • memory/2148-84-0x000007FEF4100000-0x000007FEF4111000-memory.dmp

        Filesize

        68KB

      • memory/2148-83-0x000007FEF4120000-0x000007FEF4131000-memory.dmp

        Filesize

        68KB

      • memory/2148-82-0x000007FEF4140000-0x000007FEF4242000-memory.dmp

        Filesize

        1.0MB

      • memory/2148-81-0x000007FEF4250000-0x000007FEF4261000-memory.dmp

        Filesize

        68KB

      • memory/2148-80-0x000007FEF4270000-0x000007FEF430F000-memory.dmp

        Filesize

        636KB

      • memory/2148-78-0x000007FEF4330000-0x000007FEF4342000-memory.dmp

        Filesize

        72KB

      • memory/2148-77-0x000007FEF4350000-0x000007FEF4361000-memory.dmp

        Filesize

        68KB

      • memory/2148-76-0x000007FEF4370000-0x000007FEF43D1000-memory.dmp

        Filesize

        388KB

      • memory/2148-75-0x000007FEF43E0000-0x000007FEF43F1000-memory.dmp

        Filesize

        68KB

      • memory/2148-74-0x000007FEF4400000-0x000007FEF4425000-memory.dmp

        Filesize

        148KB

      • memory/2148-73-0x000007FEF4430000-0x000007FEF4465000-memory.dmp

        Filesize

        212KB

      • memory/2148-72-0x000007FEF4470000-0x000007FEF4582000-memory.dmp

        Filesize

        1.1MB

      • memory/2148-70-0x000007FEF47D0000-0x000007FEF47E2000-memory.dmp

        Filesize

        72KB

      • memory/2148-69-0x000007FEF47F0000-0x000007FEF4887000-memory.dmp

        Filesize

        604KB

      • memory/2148-68-0x000007FEF4890000-0x000007FEF48A1000-memory.dmp

        Filesize

        68KB

      • memory/2148-67-0x000007FEF48B0000-0x000007FEF490C000-memory.dmp

        Filesize

        368KB

      • memory/2148-65-0x000007FEF4AD0000-0x000007FEF4AFC000-memory.dmp

        Filesize

        176KB

      • memory/2148-64-0x000007FEF4B00000-0x000007FEF4C3B000-memory.dmp

        Filesize

        1.2MB

      • memory/2148-62-0x000007FEF4C60000-0x000007FEF4C73000-memory.dmp

        Filesize

        76KB

      • memory/2148-61-0x000007FEF4C80000-0x000007FEF4CA1000-memory.dmp

        Filesize

        132KB

      • memory/2148-60-0x000007FEF4CB0000-0x000007FEF4CC2000-memory.dmp

        Filesize

        72KB

      • memory/2148-59-0x000007FEF4CD0000-0x000007FEF4CE1000-memory.dmp

        Filesize

        68KB

      • memory/2148-58-0x000007FEF4CF0000-0x000007FEF4D13000-memory.dmp

        Filesize

        140KB

      • memory/2148-57-0x000007FEF4D20000-0x000007FEF4D37000-memory.dmp

        Filesize

        92KB

      • memory/2148-56-0x000007FEF4D40000-0x000007FEF4D64000-memory.dmp

        Filesize

        144KB

      • memory/2148-55-0x000007FEF4D70000-0x000007FEF4D98000-memory.dmp

        Filesize

        160KB

      • memory/2148-54-0x000007FEF4DA0000-0x000007FEF4DF6000-memory.dmp

        Filesize

        344KB

      • memory/2148-53-0x000007FEF4E00000-0x000007FEF4E11000-memory.dmp

        Filesize

        68KB

      • memory/2148-50-0x000007FEF4F00000-0x000007FEF4F30000-memory.dmp

        Filesize

        192KB

      • memory/2148-49-0x000007FEF4F30000-0x000007FEF4F48000-memory.dmp

        Filesize

        96KB

      • memory/2148-48-0x000007FEF4F50000-0x000007FEF4F61000-memory.dmp

        Filesize

        68KB

      • memory/2148-47-0x000007FEF4F70000-0x000007FEF4F8B000-memory.dmp

        Filesize

        108KB

      • memory/2148-46-0x000007FEF4F90000-0x000007FEF4FA1000-memory.dmp

        Filesize

        68KB

      • memory/2148-45-0x000007FEF4FB0000-0x000007FEF4FC1000-memory.dmp

        Filesize

        68KB

      • memory/2148-44-0x000007FEF4FD0000-0x000007FEF4FE1000-memory.dmp

        Filesize

        68KB

      • memory/2148-43-0x000007FEF4FF0000-0x000007FEF5008000-memory.dmp

        Filesize

        96KB

      • memory/2148-42-0x000007FEF6810000-0x000007FEF6831000-memory.dmp

        Filesize

        132KB

      • memory/2148-41-0x000007FEF6840000-0x000007FEF687F000-memory.dmp

        Filesize

        252KB

      • memory/2148-40-0x000007FEF5010000-0x000007FEF60BB000-memory.dmp

        Filesize

        16.7MB

      • memory/2148-35-0x000007FEF6D10000-0x000007FEF6D27000-memory.dmp

        Filesize

        92KB

      • memory/2148-34-0x000007FEFB150000-0x000007FEFB161000-memory.dmp

        Filesize

        68KB

      • memory/2148-33-0x000007FEFB500000-0x000007FEFB517000-memory.dmp

        Filesize

        92KB

      • memory/2148-32-0x000007FEFBBE0000-0x000007FEFBBF8000-memory.dmp

        Filesize

        96KB

      • memory/2148-31-0x000007FEF62C0000-0x000007FEF6574000-memory.dmp

        Filesize

        2.7MB

      • memory/2148-29-0x000000013FE00000-0x000000013FEF8000-memory.dmp

        Filesize

        992KB