Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
14/03/2024, 18:07
General
-
Target
226e705418f9d0d7111abe61b23f428c993e45cc68d6d73646b77ee1ceb07beb.exe
-
Size
410KB
-
MD5
3570553329c45e96108ca88f6148d3a9
-
SHA1
5d8413839c4d05511e92235dcb2755f8f92d8561
-
SHA256
226e705418f9d0d7111abe61b23f428c993e45cc68d6d73646b77ee1ceb07beb
-
SHA512
e6f36414b5e7feafb10ee10b813856e110d460d8027097bb8acf1969b7910c2874890ffa73dbdee76bda1020d86eb95628bd9a99c8d623ba16b1ea58b2ae23bd
-
SSDEEP
12288:EQUXcuujAIFWfUnp4QhN6/OayVqmR7s9ILgZFjsDfOGS3A3Uf:EQUXOAI5n2QhN6/Oay4mR7s9ILgZFjso
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\226e705418f9d0d7111abe61b23f428c993e45cc68d6d73646b77ee1ceb07beb.exe"C:\Users\Admin\AppData\Local\Temp\226e705418f9d0d7111abe61b23f428c993e45cc68d6d73646b77ee1ceb07beb.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\226e705418f9d0d7111abe61b23f428c993e45cc68d6d73646b77ee1ceb07beb.exeC:\Users\Admin\AppData\Local\Temp\226e705418f9d0d7111abe61b23f428c993e45cc68d6d73646b77ee1ceb07beb.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
410KB
MD5ea4099ced6d6df28572b43e6dd8cdefc
SHA166177b1c490d8510c8f1beeb80a3b195e08acc5c
SHA256cf1b5774b0f4f8ec9612c3b45618c3267b41ef68ed7c8412511386f6f95f6480
SHA51247abace65de71ebcdaf647a5668dc10f1538da60028eb77f6ae26a35c08b9efba349784f262b2491dbb8eb63192a4e9c807048b14a59132879ac13bab17e474d
-
Filesize
236KB
-
Filesize
236KB
-
Filesize
236KB
-
Filesize
236KB
-
Filesize
104KB
-
Filesize
236KB