Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    24/02/2024, 17:51

General

  • Target

    a26180892ad229612d66ec389876ea0c.exe

  • Size

    27KB

  • MD5

    a26180892ad229612d66ec389876ea0c

  • SHA1

    d5216afbd33e2aad4805a1570fce706b31c1249b

  • SHA256

    a0b35a0402a7b2a154eede3f2a17b48e72ee19f2c214d88a1ccf863bf5130e2f

  • SHA512

    559bba8f61f59cbefa0574b7acc74777409e6ebc75efe5161b21213f7bba458cef4be58686bdf8a2fb8cef0df1739cd62264b7218c8318dfeccfff6d3a2aa301

  • SSDEEP

    384:FE9injM/18TD+UdGvO375WswgUefZrpihrKJ+8jClje9WY4IQYt8wCuzgpNNxOYf:F/jMd/83TBLfhwhrUChh3Iz4NKY7HT

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Drops file in Program Files directory 4 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\a26180892ad229612d66ec389876ea0c.exe
    "C:\Users\Admin\AppData\Local\Temp\a26180892ad229612d66ec389876ea0c.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in Program Files directory
    • Suspicious behavior: EnumeratesProcesses
    PID:2184

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Program Files\Common Files\Microsoft Shared\MSInfo\zyplxixv.dll

    Filesize

    36KB

    MD5

    0855f7f2f190049a72c95a3c9093392e

    SHA1

    4202dfc5ac41336cf19bbc6219429a189a39a657

    SHA256

    33e52e2a40d150cb6a205357727c4b356ceec5798addb43dcfef642af0a08378

    SHA512

    818e4504b7ddd409353f1f843db9ae6c04d99a772307c327e11f03d5ff1e53734bc6c7f89ccc209897c1fbd4a7420ff2f30e4ad3361a710fa6d4a4ccd1f825b1

  • memory/2184-0-0x0000000000400000-0x0000000000405000-memory.dmp

    Filesize

    20KB

  • memory/2184-8-0x0000000000400000-0x0000000000405000-memory.dmp

    Filesize

    20KB