Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
04/02/2024, 02:39
General
-
Target
8e0309e416e9924f3c6013fb367ecf9c.exe
-
Size
82KB
-
MD5
8e0309e416e9924f3c6013fb367ecf9c
-
SHA1
f972aa20a7431ec248c0ff0a787a5f0000493f0d
-
SHA256
0a18fcc6b20087c744e547e2351c938d3a169de183ec68882d80af7943298504
-
SHA512
2f4fb4db927e6f1036edccdd9d3ddffc566a62db1562a5bdb041934b38cf734d0b0402992c25b5355868186f93238d7c8516c5c3c931e2641aa4c79644577924
-
SSDEEP
1536:goPa5VpKPtAylAVRzrTBq7nW/O1o0U5obXf2UUK7Q4UaI:RijpeG0AVRzrT0DKOKncf2pQXUaI
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\8e0309e416e9924f3c6013fb367ecf9c.exe"C:\Users\Admin\AppData\Local\Temp\8e0309e416e9924f3c6013fb367ecf9c.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\8e0309e416e9924f3c6013fb367ecf9c.exeC:\Users\Admin\AppData\Local\Temp\8e0309e416e9924f3c6013fb367ecf9c.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
82KB
MD539b29c53aec5ad9b1de82cda1d00f51d
SHA18bc81acd878df41777fc169508914e6b4268189d
SHA256a51276153ee915799d5c30bc4575733b0cc417699d5b52f4558f7d4bc6a4c976
SHA5123ce9ec14a69310af3d1146662dd749d6aeb7ee735618d0c2fd03f3be7c82094b21720614f912879ebae834ebebf3d154ec993ab2eff3055ce8dc30274f3c3a5c
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
56KB
-
Filesize
108KB