Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
12/03/2024, 01:33
General
-
Target
bb12ed93b25e73d7182542b6fa3134a4e8a6a27d64146830e88abaf884531f01.exe
-
Size
256KB
-
MD5
196536a0faf1320fbbca5e8e28aa5bc0
-
SHA1
2ac9b0a0eb11574bac8f676d7134692f7fd059f4
-
SHA256
bb12ed93b25e73d7182542b6fa3134a4e8a6a27d64146830e88abaf884531f01
-
SHA512
a962daf042c6ebaafe09fcc46c1abb855bd192c054d1dcedeab4e0d962776ac297e5669e3c358f3569ca12e6b4c1aa68f3bcdbc415fcb3020927e24f99869f52
-
SSDEEP
6144:47J5T9bhErTJhfB3nFky6QVMv75T2FhE/BzRtIdVv/hQZiSCCO53BDu0W7cyqCxL:cUXbBXFk7v75zBzRtkVv/hQZOCO53p8x
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\bb12ed93b25e73d7182542b6fa3134a4e8a6a27d64146830e88abaf884531f01.exe"C:\Users\Admin\AppData\Local\Temp\bb12ed93b25e73d7182542b6fa3134a4e8a6a27d64146830e88abaf884531f01.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\bb12ed93b25e73d7182542b6fa3134a4e8a6a27d64146830e88abaf884531f01.exeC:\Users\Admin\AppData\Local\Temp\bb12ed93b25e73d7182542b6fa3134a4e8a6a27d64146830e88abaf884531f01.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
256KB
MD506dfd5bee3f6292ec7015c784f7ee3c9
SHA19e3ad90e4e20ec0d205f6365e27d516f089f5ea1
SHA256f192ebf0fec41094eb39c67cfec461aa15421e4cd29e26733e2d89f3e007e07a
SHA51262c37dba6af5c73a925dd81490e81232ac36bb160c2c5f89c4286cec664c0c9628f454d740c05a13189cc81344e8ec2adc51afb26b8e1e051ff8b3abcd320ca3
-
Filesize
240KB
-
Filesize
240KB
-
Filesize
240KB
-
Filesize
84KB
-
Filesize
240KB