Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
-
submitted
07/03/2024, 00:11
General
-
Target
da3cc5d643ce75182e168fd3f67d2f314146e77cb452b2ef1bb1f01ac086e723.exe
-
Size
256KB
-
MD5
86862d5faf61b330c3de3524f9e6169e
-
SHA1
1356cb463201dabe303e7b17d07c360ced23dd2b
-
SHA256
da3cc5d643ce75182e168fd3f67d2f314146e77cb452b2ef1bb1f01ac086e723
-
SHA512
abf29e42ddb19e575d07f57f26aaa1d20d5ff0b249371ba4492f80fba17d51fa665c9df80cfd9b9716665b3936ba9e9f6e6131a97a6ef4861ea27f012c3e2118
-
SSDEEP
6144:dhoYSsYmlk9+eMsxCP+v0W7cyqCxSngmMBqf7:dSDY+Ien150npM47
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\da3cc5d643ce75182e168fd3f67d2f314146e77cb452b2ef1bb1f01ac086e723.exe"C:\Users\Admin\AppData\Local\Temp\da3cc5d643ce75182e168fd3f67d2f314146e77cb452b2ef1bb1f01ac086e723.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\da3cc5d643ce75182e168fd3f67d2f314146e77cb452b2ef1bb1f01ac086e723.exeC:\Users\Admin\AppData\Local\Temp\da3cc5d643ce75182e168fd3f67d2f314146e77cb452b2ef1bb1f01ac086e723.exe2⤵
- Executes dropped EXE
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
256KB
MD571264d00f374f12d0fba2fbd176a16e9
SHA1340dd1b589fb7586416d3b3aef5ee908ef9e0a84
SHA256bd4026532519183f38ead2122c12c80b75ebf131827dd88cdc1c3dd6ab91693b
SHA51243ef2dbc136794cf96819d7b6fa25d8708ab0b7cb729302b43417764aec4e20a93fe680fd6d0f88bf1a5028c41c0be219f326c20f50f794ed29e5a24486505d3
-
Filesize
240KB
-
Filesize
240KB
-
Filesize
240KB
-
Filesize
84KB
-
Filesize
240KB
-
Filesize
240KB