Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    15/03/2024, 11:40

General

  • Target

    cb51961e17a5dd0dcc1941cd1c2802bb.exe

  • Size

    332KB

  • MD5

    cb51961e17a5dd0dcc1941cd1c2802bb

  • SHA1

    3ee093330800eaa2479a386d6e508d14a77ef625

  • SHA256

    203bf9e0e8b4d09bf8cecb2450c37fba9c5fefe79f34fe89e6ab31cc9a550cd8

  • SHA512

    91502d10c358d40bdc8d5dc12f9dffab748b6ab17610278d162403e1c131a9ef2071829bd3750b90d245868577e948f18e6b878421d5c91697c9d36951ad51ae

  • SSDEEP

    6144:P+fLJd6AT9N7rFcX8Wx2u9GC+EjhvGhc1zudfVh9M9soUvJm:P+DJEENo9GC+xctWdh9MZz

Score
6/10

Malware Config

Signatures

  • Drops desktop.ini file(s) 6 IoCs
  • Drops file in Program Files directory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\cb51961e17a5dd0dcc1941cd1c2802bb.exe
    "C:\Users\Admin\AppData\Local\Temp\cb51961e17a5dd0dcc1941cd1c2802bb.exe"
    1⤵
    • Drops desktop.ini file(s)
    • Drops file in Program Files directory
    PID:2088

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\osetup.dll

    Filesize

    5.8MB

    MD5

    f6e8da7e680a9bc0213dd84e93ff6672

    SHA1

    db7717558595c1d0c9a22810dd22a5f248a4c0ed

    SHA256

    ef1ae989248de4adc5407c199e3de3cbc57317ee5f02a407cb9c5aa04d8507cd

    SHA512

    089d523257affef53cc41a6ea11df8f907104d5daebf077dc4068604c40210fd9fa2ed8eed7cf501a2daa1575c64f8e7ee074c8caa5279141689c5443030e620

  • C:\Program Files\Java\jdk1.7.0_80\jre\bin\glib-lite.dll

    Filesize

    5B

    MD5

    b5b682b742431a52ea8b17c72ad9c572

    SHA1

    326320f469235708c59f678c9a7357dca552d306

    SHA256

    30d9045a9f172208b13161d1f5204e5787e5e07bfbb4f490d0041b03b7f44f76

    SHA512

    4e1bd7cc616b3115baf6be7ebd29fe2d1123bc0f25464865a0cf9207b0344fba70747a5ce6f00e8d9c696881f6db1e12f81736bc748b6f2b60bf84c681a49163

  • memory/2088-0-0x0000000000400000-0x000000000040A000-memory.dmp

    Filesize

    40KB

  • memory/2088-696-0x0000000000400000-0x000000000040A000-memory.dmp

    Filesize

    40KB