Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
28/02/2024, 00:19
General
-
Target
aa84fbd8b5342a4175c6ecf4ae691462.exe
-
Size
162KB
-
MD5
aa84fbd8b5342a4175c6ecf4ae691462
-
SHA1
0dba8fb527eb7a6f7a19a82316c3b2d9c6f9fc38
-
SHA256
4be45e4d2b5fb7a6fbebc3cfbec33f88c266488ff9c5ecc43a4b9e19c18920f5
-
SHA512
bd1fe107edae54dee9d334f9541ec7133d609bc6f1afaa500e329e025d79653503e9488f28b1443956037aaaad2bef2caff0f78b85ba45a5bf619c7d72082641
-
SSDEEP
3072:J79JpuOJ7Xth+uDS/PiWhTTYYV9Z7jhxdktQK5WvYGEBhkbIDw3IV:JHpjXth+t6WhrV/79ziQK5WvYJBhkbIz
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\aa84fbd8b5342a4175c6ecf4ae691462.exe"C:\Users\Admin\AppData\Local\Temp\aa84fbd8b5342a4175c6ecf4ae691462.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\aa84fbd8b5342a4175c6ecf4ae691462.exeC:\Users\Admin\AppData\Local\Temp\aa84fbd8b5342a4175c6ecf4ae691462.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
162KB
MD502488fc2029960d7e099b4a0c0932cb2
SHA101a4093e8c19c5f2a4017cdc98fa19bda487b268
SHA25691d0b9252d68df7b5e848c96718e048e8d7b9d703a6697eea7692f1b441f4570
SHA512efd109f451296552a7c5cc95c1c7ae1506c410fb0491895b949243ce36447f320c1444fcec7b91bc3d1158197d6f6c6d75732860fa4a33230b8c54d9d5a50833
-
Filesize
184KB
-
Filesize
108KB
-
Filesize
184KB
-
Filesize
108KB
-
Filesize
184KB
-
Filesize
184KB
-
Filesize
56KB
-
Filesize
108KB