Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    18s
  • max time network
    19s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    22/02/2024, 20:36

General

  • Target

    Pali/loader_prod.exe

  • Size

    25.8MB

  • MD5

    bf8c871604eb4297a39c675b655a9f05

  • SHA1

    f47bb195479b8f0555e21447503feb2be542ee3a

  • SHA256

    3402266e9dea3f417c15c10154ca37761740b41c1c43823b705a177cee32721e

  • SHA512

    d316caa28a270e97674069acb93a80e3d616aa5b3f284ca474234188b60238fa1dd39bc542fe6aa0f5f25d70eecca8c9ed4f3414b0bf8af217dbd7e344d0587e

  • SSDEEP

    393216:njI1es00EYUK2uKa5b/kiJQQTCKJLigXB+605007GedW6+ADmFRL3am8cRr9IrCK:njIR0062OQTjJ+JOTeiASFycRx

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Pali\loader_prod.exe
    "C:\Users\Admin\AppData\Local\Temp\Pali\loader_prod.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • Suspicious behavior: EnumeratesProcesses
    PID:2768

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2768-0-0x0000000077560000-0x0000000077562000-memory.dmp

    Filesize

    8KB

  • memory/2768-3-0x0000000140000000-0x0000000142DD2000-memory.dmp

    Filesize

    45.8MB

  • memory/2768-2-0x0000000077560000-0x0000000077562000-memory.dmp

    Filesize

    8KB

  • memory/2768-6-0x0000000077560000-0x0000000077562000-memory.dmp

    Filesize

    8KB

  • memory/2768-7-0x0000000077570000-0x0000000077572000-memory.dmp

    Filesize

    8KB

  • memory/2768-9-0x0000000077570000-0x0000000077572000-memory.dmp

    Filesize

    8KB

  • memory/2768-11-0x0000000077570000-0x0000000077572000-memory.dmp

    Filesize

    8KB

  • memory/2768-13-0x0000000140000000-0x0000000142DD2000-memory.dmp

    Filesize

    45.8MB

  • memory/2768-14-0x00000000773B0000-0x0000000077559000-memory.dmp

    Filesize

    1.7MB

  • memory/2768-18-0x0000000140000000-0x0000000142DD2000-memory.dmp

    Filesize

    45.8MB

  • memory/2768-19-0x00000000773B0000-0x0000000077559000-memory.dmp

    Filesize

    1.7MB