Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

bffc4614c8...9e.exe

windows7-x64

7

bffc4614c8...9e.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    118s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    08/03/2024, 22:50

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    bffc4614c81fd363048b5280ef3afd69a5391ee2524b8933c830c5f18a2db99e.exe

  • Size

    955KB

  • MD5

    fa86cdc4154576099f9936fdb3484754

  • SHA1

    11e360b6e5cfbb305bce459ab9948d325c67dfa1

  • SHA256

    bffc4614c81fd363048b5280ef3afd69a5391ee2524b8933c830c5f18a2db99e

  • SHA512

    27aa4e294d7424dc81e320e9a10be006004b92d083c011766c43dad9042fa540f5878c0c760f0c5ea7dd6caabbeb5aa68ee6901e4ae524616442f88e86babb93

  • SSDEEP

    24576:oTEc1b+PONfuDNmWs9kLZmX1+RnM3L2N9Y3G3wSK6JE4t6FGerrthf:oTEpPDNmWsuZmF+RnM3L2N9YWgSK6JEb

Score
7/10

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\bffc4614c81fd363048b5280ef3afd69a5391ee2524b8933c830c5f18a2db99e.exe
    "C:\Users\Admin\AppData\Local\Temp\bffc4614c81fd363048b5280ef3afd69a5391ee2524b8933c830c5f18a2db99e.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:2508
    • C:\Users\Admin\AppData\Local\Temp\9138.tmp
      "C:\Users\Admin\AppData\Local\Temp\9138.tmp"
      2⤵
      • Deletes itself
      • Executes dropped EXE
      PID:2908

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\9138.tmp
    Filesize

    955KB

    MD5

    c99cbe232fee0d78358535e734ce301e

    SHA1

    1caa315d548b8e5eb20af6d84bd908eee71f9e7b

    SHA256

    ffbc32ee8b0fe994e5cf7101e0aa69ffa245fd915233ceb4c523340e00325514

    SHA512

    366fb653a6e988ec8956d10e5a31c725e93d888fa1a4d5cb9cf04d2d70e4cd1facfa7b38356d544db6507fcc8fe047c9f8780f77584867155259e3b71a560442

    Download Submit