Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
25/02/2024, 01:08
Behavioral task
behavioral1
Sample
157afa8d60632441bf73b7210cd508b3.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
157afa8d60632441bf73b7210cd508b3.exe
Resource
win10v2004-20240221-en
General
-
Target
157afa8d60632441bf73b7210cd508b3.exe
-
Size
9.1MB
-
MD5
157afa8d60632441bf73b7210cd508b3
-
SHA1
2e7edca4de98b2fa0aa35572144f6002499e3c37
-
SHA256
f30fda52cd5b3e5ec820c55a5c8dbe629426b95cabd6e839f34a40c790361da3
-
SHA512
c7c849b99aff37d501ee285819948b1be013acd4674ad8a7743cda39e825ca2d354ecee12c1756169778de117774492b5f8588faecc2bd07243b01fb1e2bbfb3
-
SSDEEP
196608:15IaysIFjJQMy+ofSsmWmvdsCnc84njQthsiHzy7kJbDohZQ/:7WjJe+oovaCncdnKhs57WbD
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 2540 157afa8d60632441bf73b7210cd508b3.exe -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 2036 wrote to memory of 2540 2036 157afa8d60632441bf73b7210cd508b3.exe 29 PID 2036 wrote to memory of 2540 2036 157afa8d60632441bf73b7210cd508b3.exe 29 PID 2036 wrote to memory of 2540 2036 157afa8d60632441bf73b7210cd508b3.exe 29
Processes
-
C:\Users\Admin\AppData\Local\Temp\157afa8d60632441bf73b7210cd508b3.exe"C:\Users\Admin\AppData\Local\Temp\157afa8d60632441bf73b7210cd508b3.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:2036 -
C:\Users\Admin\AppData\Local\Temp\157afa8d60632441bf73b7210cd508b3.exe"C:\Users\Admin\AppData\Local\Temp\157afa8d60632441bf73b7210cd508b3.exe"2⤵
- Loads dropped DLL
PID:2540
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.6MB
MD5e3cdf647c6091c58d49233776b528ca8
SHA1376b6f6dd07dc37d9c6307a1c8757b423293d6dd
SHA2567ac2ece62bf727a08f2a71324fc16bbc3b391b821af753e681a7727b376c0c85
SHA5127b796a56396a8dce37c91081948f222de2c22bd2bf1ece3bd957a768c1265393099519c25d5ccc0f00931924d889a180ff261de6e0cdf5cedd8932e3801a7715
-
Filesize
4.2MB
MD5c6c37b848273e2509a7b25abe8bf2410
SHA1b27cfbd31336da1e9b1f90e8f649a27154411d03
SHA256b7a7f3707beab109b66de3e340e3022dd83c3a18f444feb9e982c29cf23c29b8
SHA512222ad791304963a4b8c1c6055e02c0c4c47fce2bb404bd4f89c022ff9706e29ca6fa36c72350fbf296c8a0e3e48e3756f969c003dd1eb056cd026efe0b7eba40