Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
149s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
18/02/2024, 03:07
Static task
static1
Behavioral task
behavioral1
Sample
8dd7c0c8b840b76f7d92bd14c5047de2.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
8dd7c0c8b840b76f7d92bd14c5047de2.exe
Resource
win10v2004-20231222-en
General
-
Target
8dd7c0c8b840b76f7d92bd14c5047de2.exe
-
Size
66KB
-
MD5
8dd7c0c8b840b76f7d92bd14c5047de2
-
SHA1
55b810863907a54a4d3fe388294f862617514bfd
-
SHA256
bf54bce8a8c40223dade5116b4d427e0ac016475e382427b7791904ed89a059e
-
SHA512
bbab110a00eab33380a673b639a2e4621762fb663e56e10bce99890b6573e3b0808611bf12bb2975f9ff5360931ec08fd298838a37c96f1b6a3f5c6ba32df70b
-
SSDEEP
1536:Dk/xY0sllyGQMOtEvwDpjwycDtKkQZQRKb61vSbgZ3QzNKUO:DW60sllyWOtEvwDpjwF858
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
pid Process 2852 asih.exe -
Loads dropped DLL 1 IoCs
pid Process 2936 8dd7c0c8b840b76f7d92bd14c5047de2.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2936 wrote to memory of 2852 2936 8dd7c0c8b840b76f7d92bd14c5047de2.exe 28 PID 2936 wrote to memory of 2852 2936 8dd7c0c8b840b76f7d92bd14c5047de2.exe 28 PID 2936 wrote to memory of 2852 2936 8dd7c0c8b840b76f7d92bd14c5047de2.exe 28 PID 2936 wrote to memory of 2852 2936 8dd7c0c8b840b76f7d92bd14c5047de2.exe 28
Processes
-
C:\Users\Admin\AppData\Local\Temp\8dd7c0c8b840b76f7d92bd14c5047de2.exe"C:\Users\Admin\AppData\Local\Temp\8dd7c0c8b840b76f7d92bd14c5047de2.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:2936 -
C:\Users\Admin\AppData\Local\Temp\asih.exe"C:\Users\Admin\AppData\Local\Temp\asih.exe"2⤵
- Executes dropped EXE
PID:2852
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
66KB
MD5bca4886295d5d48ac510be8f4cd8dca2
SHA1a7c3b7f9cb0a5308e3fbd131cbc6756111dfef0f
SHA256746d0407b9933e163a26262dadca914bcecd3004ac02497da1658fa5fc2e9b27
SHA5126b017f1d87a25e9c07726a4b0551f69f63b8845ece74cebec0d78bba01b7bbe4eacefd133ec62a08afa71399166c75114213542580ccf0623435b4b711b9bffb