Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    14/02/2024, 15:36

General

  • Target

    9c0ab2685381d78bc5995ba8fd50ac15.exe

  • Size

    1.8MB

  • MD5

    9c0ab2685381d78bc5995ba8fd50ac15

  • SHA1

    658166068e99d99a73f8ca3511b67d63d81bf1b4

  • SHA256

    68926bf5d0f3b903b3e0d254f17f5f3a99df942eb464ffce7c1cd7de99d9c54e

  • SHA512

    8f8044725f88d35aa92104f781e7bde1ddbed14699b0745dbcd76e6d5485a1d39397928d27f681c84f4b86431fa843eb87ad88b9724c6aba685277820d8bf679

  • SSDEEP

    24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7NxqG:SCqm2Jpr0nNM7Dus7Nx3

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 4 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Drops desktop.ini file(s) 9 IoCs
  • Drops file in Program Files directory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\9c0ab2685381d78bc5995ba8fd50ac15.exe
    "C:\Users\Admin\AppData\Local\Temp\9c0ab2685381d78bc5995ba8fd50ac15.exe"
    1⤵
    • Drops desktop.ini file(s)
    • Drops file in Program Files directory
    PID:2404

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Program Files\7-Zip\7-zip32.dll.exe

    Filesize

    1.8MB

    MD5

    eeeee91c2c390b3bfe4e2a1e186c6668

    SHA1

    01748b5484ffb3846a5565a1ca75f5677f981d80

    SHA256

    56fe58bc6c265c748ca6de3c4699a5ec5273dd2d8cece68dbaa3e2da9635fd2d

    SHA512

    08f74fe9ee33eaaf5b75bdf3ef9b5ed63ea5a67aa1a703cc284d3a882b918a8740c8f3a9cc26f14473abafca73fb7bac91953894b284ace0fa2f35047cb55a93

  • memory/2404-0-0x0000000000400000-0x00000000005BA000-memory.dmp

    Filesize

    1.7MB

  • memory/2404-2407-0x0000000000400000-0x00000000005BA000-memory.dmp

    Filesize

    1.7MB

  • memory/2404-9212-0x0000000000400000-0x00000000005BA000-memory.dmp

    Filesize

    1.7MB