Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
117s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
22/01/2024, 01:01
Behavioral task
behavioral1
Sample
32ed36fb1c3f23fbb5c9c3ca61ae089558cd85e5dec4777359c1a6ee6eb2b82e.exe
Resource
win7-20231215-en
General
-
Target
32ed36fb1c3f23fbb5c9c3ca61ae089558cd85e5dec4777359c1a6ee6eb2b82e.exe
-
Size
14.4MB
-
MD5
1e68e1e04a5e94d7a17f686a488051ff
-
SHA1
09122f9525a957faf0d96c81ab95bb4def243c64
-
SHA256
32ed36fb1c3f23fbb5c9c3ca61ae089558cd85e5dec4777359c1a6ee6eb2b82e
-
SHA512
690415cefe821465600c3539b843b443c064b00c235ff27d8f4d80d03456d8de1b32f38fc2f4f36eba6eea938e71d6a78a74e2113486f5d857bf87c5bb2a370d
-
SSDEEP
393216:au7L/sQboidQuslSq99oWOv+9fgSMA+NT7:aCL0QbjdQuSDorvSYS6d
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 2736 32ed36fb1c3f23fbb5c9c3ca61ae089558cd85e5dec4777359c1a6ee6eb2b82e.exe -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 2620 wrote to memory of 2736 2620 32ed36fb1c3f23fbb5c9c3ca61ae089558cd85e5dec4777359c1a6ee6eb2b82e.exe 28 PID 2620 wrote to memory of 2736 2620 32ed36fb1c3f23fbb5c9c3ca61ae089558cd85e5dec4777359c1a6ee6eb2b82e.exe 28 PID 2620 wrote to memory of 2736 2620 32ed36fb1c3f23fbb5c9c3ca61ae089558cd85e5dec4777359c1a6ee6eb2b82e.exe 28
Processes
-
C:\Users\Admin\AppData\Local\Temp\32ed36fb1c3f23fbb5c9c3ca61ae089558cd85e5dec4777359c1a6ee6eb2b82e.exe"C:\Users\Admin\AppData\Local\Temp\32ed36fb1c3f23fbb5c9c3ca61ae089558cd85e5dec4777359c1a6ee6eb2b82e.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:2620 -
C:\Users\Admin\AppData\Local\Temp\32ed36fb1c3f23fbb5c9c3ca61ae089558cd85e5dec4777359c1a6ee6eb2b82e.exe"C:\Users\Admin\AppData\Local\Temp\32ed36fb1c3f23fbb5c9c3ca61ae089558cd85e5dec4777359c1a6ee6eb2b82e.exe"2⤵
- Loads dropped DLL
PID:2736
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4.3MB
MD5deaf0c0cc3369363b800d2e8e756a402
SHA13085778735dd8badad4e39df688139f4eed5f954
SHA256156cf2b64dd0f4d9bdb346b654a11300d6e9e15a65ef69089923dafc1c71e33d
SHA5125cac1d92af7ee18425b5ee8e7cd4e941a9ddffb4bc1c12bb8aeabeed09acec1ff0309abc41a2e0c8db101fee40724f8bfb27a78898128f8746c8fe01c1631989