Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    147s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05/03/2024, 16:56

General

  • Target

    b530d1ff611ceeee54b5d919619278fc.exe

  • Size

    36KB

  • MD5

    b530d1ff611ceeee54b5d919619278fc

  • SHA1

    914b8e9ef777e7506293d3cef10415e4e1bc9a93

  • SHA256

    e2b4214f07c55350c422d41966e6a9286c4ad46048baa98fc970606d9d38dd1f

  • SHA512

    6717b8a54c6fbe82c454dc6ea696089ea3856fdfec1e5ef83cbfc2358da62a0ab4e78dc1ce87d6b5707e4f531fc80386fff07e17dc332aaf156373ed6ca5dd4e

  • SSDEEP

    384:8t/Sh3ULqq7U2Tk5mdkWJJQA++k846lb99N0K/o5Akby9ca4:i/UkLL7U2Tk5MLT99Zea4

Score
10/10

Malware Config

Extracted

Credentials

  • Protocol:
    smtp
  • Host:
    smtp.gmail.com
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    G5VANbwi

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\b530d1ff611ceeee54b5d919619278fc.exe
    "C:\Users\Admin\AppData\Local\Temp\b530d1ff611ceeee54b5d919619278fc.exe"
    1⤵
      PID:1124

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1124-0-0x000007FEF56E0000-0x000007FEF607D000-memory.dmp

      Filesize

      9.6MB

    • memory/1124-1-0x00000000004F0000-0x0000000000570000-memory.dmp

      Filesize

      512KB

    • memory/1124-2-0x000007FEF56E0000-0x000007FEF607D000-memory.dmp

      Filesize

      9.6MB

    • memory/1124-3-0x000007FEF56E0000-0x000007FEF607D000-memory.dmp

      Filesize

      9.6MB

    • memory/1124-4-0x00000000004F0000-0x0000000000570000-memory.dmp

      Filesize

      512KB