Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
12/03/2024, 01:25
General
-
Target
b7d909fe4eb0e80f5a57b1d314938b7a15872d83da7719ad9ea7c4334c95c322.exe
-
Size
223KB
-
MD5
161f0303a31dbef78a60577592535867
-
SHA1
90e141b2d248dd5fbf4b6b607d9c876689c85079
-
SHA256
b7d909fe4eb0e80f5a57b1d314938b7a15872d83da7719ad9ea7c4334c95c322
-
SHA512
89a33f9b52ef4ac6d825377e869ae2b0d1802bc847f8cb5614ef225744d8d1039f9e874a1e7c39230b57a0e9e878bb26df3ae26ca7bbbbe377cfca289115a81f
-
SSDEEP
6144:FPD4YjSi6V05hABA5bum55hg556hiQNO0WP:Fb4YWVV04mvdniQNO0WP
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\b7d909fe4eb0e80f5a57b1d314938b7a15872d83da7719ad9ea7c4334c95c322.exe"C:\Users\Admin\AppData\Local\Temp\b7d909fe4eb0e80f5a57b1d314938b7a15872d83da7719ad9ea7c4334c95c322.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\b7d909fe4eb0e80f5a57b1d314938b7a15872d83da7719ad9ea7c4334c95c322.exeC:\Users\Admin\AppData\Local\Temp\b7d909fe4eb0e80f5a57b1d314938b7a15872d83da7719ad9ea7c4334c95c322.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
223KB
MD53050a96a939b99aaf924b943a1b29c97
SHA15ab5f294d88e473582bab1998b3e664defc64486
SHA2569ea637454e926edd8343c3c8857641ce709df04557a5accc4b118f72b3befaef
SHA512358cd237ee7ac2ba60ee11ecbfa9672649c1e3f6112babf53831c1edb1b15322cf86a894816c9665c606b732c72a1e4725065928bbdc2280920731665be533a9
-
Filesize
280KB
-
Filesize
104KB
-
Filesize
280KB
-
Filesize
280KB
-
Filesize
280KB
-
Filesize
280KB
-
Filesize
280KB