Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    09/03/2024, 15:12

General

  • Target

    bc1e59e393185c22e669247a68de536d.exe

  • Size

    367KB

  • MD5

    bc1e59e393185c22e669247a68de536d

  • SHA1

    044d563906f425ed8eb14631feeea5005c000b51

  • SHA256

    063ba328be1a05fbc5216d590ef650a9f3ed8acd765191aad6b1c222b4d5c804

  • SHA512

    6fc8538eb929092a55c7dec948909fbde7afe51ea036894ee3d7ff8afd73feb12d92092da9a6e03be9e7d6e08002e2b7219ee10d2707db6344a430712a7eb1a5

  • SSDEEP

    6144:dMQK7Gr/u9WzS/H2qNTjNPcX3X9Xt+UPoTIQyC+aldF/6J7q/hYJJg/1RGAoyh:dMjGr/u9EAZk399+Duyh

Score
7/10

Malware Config

Signatures

  • Drops startup file 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\bc1e59e393185c22e669247a68de536d.exe
    "C:\Users\Admin\AppData\Local\Temp\bc1e59e393185c22e669247a68de536d.exe"
    1⤵
    • Drops startup file
    • Loads dropped DLL
    PID:2344

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • \ProgramData\{bac7aa55-0643-8f22-bac7-7aa55064a954}\bc1e59e393185c22e669247a68de536d.exe

    Filesize

    367KB

    MD5

    bc1e59e393185c22e669247a68de536d

    SHA1

    044d563906f425ed8eb14631feeea5005c000b51

    SHA256

    063ba328be1a05fbc5216d590ef650a9f3ed8acd765191aad6b1c222b4d5c804

    SHA512

    6fc8538eb929092a55c7dec948909fbde7afe51ea036894ee3d7ff8afd73feb12d92092da9a6e03be9e7d6e08002e2b7219ee10d2707db6344a430712a7eb1a5

  • memory/2344-12-0x00000000001B0000-0x00000000001B2000-memory.dmp

    Filesize

    8KB

  • memory/2344-6-0x00000000001A0000-0x00000000001A1000-memory.dmp

    Filesize

    4KB

  • memory/2344-24-0x0000000000740000-0x0000000000741000-memory.dmp

    Filesize

    4KB

  • memory/2344-22-0x0000000000120000-0x0000000000121000-memory.dmp

    Filesize

    4KB

  • memory/2344-21-0x0000000000750000-0x0000000000751000-memory.dmp

    Filesize

    4KB

  • memory/2344-20-0x0000000000730000-0x0000000000731000-memory.dmp

    Filesize

    4KB

  • memory/2344-19-0x0000000000720000-0x0000000000721000-memory.dmp

    Filesize

    4KB

  • memory/2344-18-0x0000000000710000-0x0000000000711000-memory.dmp

    Filesize

    4KB

  • memory/2344-17-0x0000000000680000-0x0000000000681000-memory.dmp

    Filesize

    4KB

  • memory/2344-16-0x0000000000600000-0x0000000000601000-memory.dmp

    Filesize

    4KB

  • memory/2344-15-0x0000000000660000-0x0000000000661000-memory.dmp

    Filesize

    4KB

  • memory/2344-14-0x0000000000620000-0x0000000000621000-memory.dmp

    Filesize

    4KB

  • memory/2344-13-0x0000000000610000-0x0000000000611000-memory.dmp

    Filesize

    4KB

  • memory/2344-0-0x0000000000020000-0x0000000000021000-memory.dmp

    Filesize

    4KB

  • memory/2344-23-0x00000000001C0000-0x00000000001C1000-memory.dmp

    Filesize

    4KB

  • memory/2344-9-0x00000000001F0000-0x00000000001F1000-memory.dmp

    Filesize

    4KB

  • memory/2344-11-0x00000000005F0000-0x00000000005F1000-memory.dmp

    Filesize

    4KB

  • memory/2344-8-0x00000000001E0000-0x00000000001E1000-memory.dmp

    Filesize

    4KB

  • memory/2344-7-0x00000000001D0000-0x00000000001D1000-memory.dmp

    Filesize

    4KB

  • memory/2344-10-0x0000000000200000-0x0000000000201000-memory.dmp

    Filesize

    4KB

  • memory/2344-5-0x0000000000190000-0x0000000000191000-memory.dmp

    Filesize

    4KB

  • memory/2344-4-0x0000000000140000-0x0000000000141000-memory.dmp

    Filesize

    4KB

  • memory/2344-3-0x0000000000130000-0x0000000000131000-memory.dmp

    Filesize

    4KB

  • memory/2344-2-0x00000000000F0000-0x00000000000F1000-memory.dmp

    Filesize

    4KB

  • memory/2344-30-0x00000000007A0000-0x00000000007A1000-memory.dmp

    Filesize

    4KB

  • memory/2344-29-0x0000000000670000-0x0000000000671000-memory.dmp

    Filesize

    4KB

  • memory/2344-25-0x0000000000630000-0x000000000065C000-memory.dmp

    Filesize

    176KB

  • memory/2344-31-0x00000000008B0000-0x00000000008B1000-memory.dmp

    Filesize

    4KB

  • memory/2344-1-0x0000000000030000-0x0000000000032000-memory.dmp

    Filesize

    8KB