Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
12/02/2024, 10:57
Static task
static1
Behavioral task
behavioral1
Sample
96fd780ccfa71873a8f87a230eefcb7d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
96fd780ccfa71873a8f87a230eefcb7d.exe
Resource
win10v2004-20231215-en
General
-
Target
96fd780ccfa71873a8f87a230eefcb7d.exe
-
Size
6KB
-
MD5
96fd780ccfa71873a8f87a230eefcb7d
-
SHA1
84df746f33e3385c9884176ab855136bf0397fe5
-
SHA256
dcb5282a094f6858bf731b33712b9d607c97027b40bc9b027121a9b8c92bc2e8
-
SHA512
054e7e56f0813b7ed2731bbb7afda4f1f934228487894e99d4788f44924277be3e77dd01362f3fda6f279682ea407520de5c92f662e711da2830b7b0a14c4df3
-
SSDEEP
96:YFW6jBgtij8U/xnhL7sv/Sb6fvLnygofSAKzgMte9oLjRsTgVg:Kjn/bGC6fjnyhfSdgMte9oLj2TgVg
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\WinTime = "C:\\Windows\\system32\\wintime.exe" 96fd780ccfa71873a8f87a230eefcb7d.exe -
Drops file in System32 directory 1 IoCs
description ioc Process File opened for modification C:\Windows\SysWOW64\time 96fd780ccfa71873a8f87a230eefcb7d.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2B
MD572b32a1f754ba1c09b3695e0cb6cde7f
SHA19109c85a45b703f87f1413a405549a2cea9ab556
SHA256c837649cce43f2729138e72cc315207057ac82599a59be72765a477f22d14a54
SHA512a2f4521450ffa4a0ec674bd6ee1bfe0e936c620adb73e0de1c16b0bd62fc03df62433f9a2ee12bd15c1fc21c888b5de9062311cba437c788ad530dc803366324