Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
19/01/2024, 04:54
General
-
Target
66c001a39715ab19fa2cea0c6992a737.exe
-
Size
82KB
-
MD5
66c001a39715ab19fa2cea0c6992a737
-
SHA1
979d6ffe1df5dd7e791620a6e193550ccd21351d
-
SHA256
d11ab68db7da63157627f189663620f839b15186f4a31767b09c51007dd978f8
-
SHA512
0f90098adafc9fa33d6915516ce2ac57e8faf49e6dc7997d0fd94f80d8674111d419452c0524dc872e0854355e15732db6e26e6ace162e37da1ce170f23e7906
-
SSDEEP
1536:F/gKlq/IESa2500HJRhMoDfRXhADiGWkk+HXv8x7Siq76qCpes86tuyGRXgq4:plGOW0pRhBfthAWAk+/8x+n76queCGG
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\66c001a39715ab19fa2cea0c6992a737.exe"C:\Users\Admin\AppData\Local\Temp\66c001a39715ab19fa2cea0c6992a737.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\66c001a39715ab19fa2cea0c6992a737.exeC:\Users\Admin\AppData\Local\Temp\66c001a39715ab19fa2cea0c6992a737.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
82KB
MD50b6a698e0f663fc1f0680c19ed2d94ea
SHA1c1c9f7a771e394fc49dfd9d6e9aa999fcd16e50d
SHA256b02cd22b36c415c10a866f31c919ff62f41f8a0662c08f45131554048eed38ec
SHA512ca50fb23bb11c83ef88bc3a721e0a3cb6eb33baed7733a3efd1854045e9b504f8799727e31a5a3bb0bfdcd9662b4a0621c0588524b2ca8e598cb8984589e9b1d
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
56KB
-
Filesize
108KB