Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
117s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
11/03/2024, 20:29
General
-
Target
36b5c2f20fb07d361eea9f68b82afe66d38b00ec34fe694e223138ebabc64b49.exe
-
Size
213KB
-
MD5
12e6b01343855b932209a8b216e57b66
-
SHA1
1fa2d752cedda724b016708be8bc36ac9f96c306
-
SHA256
36b5c2f20fb07d361eea9f68b82afe66d38b00ec34fe694e223138ebabc64b49
-
SHA512
0298a82958a6991a42cbe7c5318cbb9de65923cd3401743f05ca335040ac13eeda49ff4e3496b6b743c6d9562b3040d3e7a4f0ad9c28c679c45e1a4346625129
-
SSDEEP
6144:HEv2c2v/GEtFHQR557j7nR8GhyMgS7tDH0:Uj2v/GEtFQR5BRFlJDH0
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\36b5c2f20fb07d361eea9f68b82afe66d38b00ec34fe694e223138ebabc64b49.exe"C:\Users\Admin\AppData\Local\Temp\36b5c2f20fb07d361eea9f68b82afe66d38b00ec34fe694e223138ebabc64b49.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\36b5c2f20fb07d361eea9f68b82afe66d38b00ec34fe694e223138ebabc64b49.exeC:\Users\Admin\AppData\Local\Temp\36b5c2f20fb07d361eea9f68b82afe66d38b00ec34fe694e223138ebabc64b49.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
213KB
MD565f0fbaaf4e2fb0bd5cae20a9b99a672
SHA1c4bb5c9c2d74f275d9385e475732394ba2507cd5
SHA256286aa35bdf31c7d9fe187eab84e60033b38290c4d5fefa6894d95a1e4b83618b
SHA512275a41ed5796f7d0ed3294444d9c52a9f7a3b73895b2d5a9868f8af1214c1fc1475962da5c63dea234a9e5c6064c12e9ae3b0bffc0ec59d7bc9a263cf21ab0a1
-
Filesize
260KB
-
Filesize
104KB
-
Filesize
260KB
-
Filesize
260KB
-
Filesize
260KB
-
Filesize
260KB