Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    140s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    12/03/2024, 17:17

General

  • Target

    8228.exe

  • Size

    2.4MB

  • MD5

    d2e00c355e557cb1bab8808c5857b260

  • SHA1

    6296e042127976fcf63330ba37635d255edab800

  • SHA256

    6a385dd001c18dc8e79f9a2d61cceb066515600b3ef9cfb71ce546866a22dc6f

  • SHA512

    b4ff8e4a837c55fe05e168687a97b954d88a23863c783e55b647530da39b46be5df5533f4d0cfc4b7249648e5561195065054a1e1861f71dd9c98322c543cb92

  • SSDEEP

    24576:xelo5jh+9b8SL1lAdL5+FPI3YqOcHQSFablTmVfExquGjHneFUJfKKiM+BECnthB:sl+h+1qs0Y/BTmLuGjHnevKR+qCLB

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\8228.exe
    "C:\Users\Admin\AppData\Local\Temp\8228.exe"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    PID:1660

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1660-0-0x00000000001C0000-0x00000000001C1000-memory.dmp

    Filesize

    4KB

  • memory/1660-1-0x0000000000400000-0x0000000000640000-memory.dmp

    Filesize

    2.2MB

  • memory/1660-3-0x00000000001C0000-0x00000000001C1000-memory.dmp

    Filesize

    4KB