Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
142s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
04/02/2024, 08:50
General
-
Target
8eb9e4031f86497e43b16806ef081eb2.exe
-
Size
9.8MB
-
MD5
8eb9e4031f86497e43b16806ef081eb2
-
SHA1
5ac1aacb0a9ff1e0150cf5822f20af5aab0e0f52
-
SHA256
e079444a54b4c2737a260d9fa5efa45a43d654e509ea4a858a292f9c021b4f7a
-
SHA512
754520d0d00a23100b90eb31a625c9dd696b62a909e6486acc09c8c142b6b9bcc8d6bcd1a5ced44df14312bb3f18dca23d4cb4d06572d53a17e21809928ac6d3
-
SSDEEP
196608:W3+LnW0yrMqy2Wan2TOL/LnYw9ctsHN0c4ByKVFaK1FgnoHWnc:DXyHvDotgNx4ByuFxMn1nc
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 4 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\8eb9e4031f86497e43b16806ef081eb2.exe"C:\Users\Admin\AppData\Local\Temp\8eb9e4031f86497e43b16806ef081eb2.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\is-LQ9CV.tmp\8eb9e4031f86497e43b16806ef081eb2.tmp"C:\Users\Admin\AppData\Local\Temp\is-LQ9CV.tmp\8eb9e4031f86497e43b16806ef081eb2.tmp" /SL5="$70120,9735829,380928,C:\Users\Admin\AppData\Local\Temp\8eb9e4031f86497e43b16806ef081eb2.exe"2⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: GetForegroundWindowSpam
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
87KB
MD52b3a2a48842cb476bb151467fcf168aa
SHA1f0b30e8091f19b6987b624a4414c8ba6cf7ceee8
SHA2565b66f6a9e2fbd147f5dedfb23068f645582c5dfda04aa4807a96abb1004be9b9
SHA5128f0a1d307aa99fdeb67142b391160e0531b445babaf41ed94c05f39dd7b13428254953fdced7b542c24804e28515b3f5d558ea8027d36e10d7cded049d77828e
-
Filesize
22KB
MD592dc6ef532fbb4a5c3201469a5b5eb63
SHA13e89ff837147c16b4e41c30d6c796374e0b8e62c
SHA2569884e9d1b4f8a873ccbd81f8ad0ae257776d2348d027d811a56475e028360d87
SHA5129908e573921d5dbc3454a1c0a6c969ab8a81cc2e8b5385391d46b1a738fb06a76aa3282e0e58d0d2ffa6f27c85668cd5178e1500b8a39b1bbae04366ae6a86d3
-
Filesize
1.0MB
MD59d457e696dffb8ad00b591cc93b54101
SHA1cdb45337b6013ca3a43fdd54094b3506ca7db4c7
SHA256b8b1f4e33fc02b053d7cf6a92784c02715f7e678fcfc424a8b9abd27e2e99a76
SHA512ef9db6a915d57d15b76063baf652334fc005f80ec6fb01c35f9a4c2d55b709bab34f3f214f732ea0dba0daf07046b3868ad37a5676c3b61e93a1cff832737186
-
Filesize
400KB
-
Filesize
400KB
-
Filesize
4KB
-
Filesize
124KB
-
Filesize
1.1MB
-
Filesize
124KB
-
Filesize
4KB