Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
18/03/2024, 15:44
General
-
Target
18032024_2344_e9d2.exe
-
Size
2.8MB
-
MD5
48dccf139519b14cb99cb5ad01f9703f
-
SHA1
2b52daeae4a9ab38924ffd6188c6a52e4b3ab923
-
SHA256
e9d2e9ff86e51a1d6cac00c9ebc889dc71bd1fe316610d7464e53b2dc6a22d58
-
SHA512
4ed18f2248142c234ad1a2dd160fcbc5189c252a7aa566b10715aa01d84a2b3d7c3082d96f4c097e6600b18b1233b39f416d69a20f18f95dfbe1e9429f36157d
-
SSDEEP
49152:UsVQJELDqzO+pIdqLRq9r5PCxN9TG13SxBDxioLUn/Xvi3x9w5GOxYDjk3+dm:xVQJEfYOndAo0y1CBDxiOUnf7GOaXG
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 3 IoCs
-
Suspicious use of WriteProcessMemory 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\18032024_2344_e9d2.exe"C:\Users\Admin\AppData\Local\Temp\18032024_2344_e9d2.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\is-CMU9V.tmp\18032024_2344_e9d2.tmp"C:\Users\Admin\AppData\Local\Temp\is-CMU9V.tmp\18032024_2344_e9d2.tmp" /SL5="$8010A,2491388,119296,C:\Users\Admin\AppData\Local\Temp\18032024_2344_e9d2.exe"2⤵
- Executes dropped EXE
- Loads dropped DLL
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.1MB
MD5be49cb708b9b78c088992095890fdbce
SHA12a05fb16f6b0e7f58ff975ecfb7e4181125ca474
SHA256e24a20096eaf4c2a5c89d15d4e58efce8140e57ef86ca7f73ba7ca64deafc27d
SHA51203283e5f5a931b9ebe790edd3945ddcd22f626cad11d9d679f3cc05ec8fdb342c70f6da1baff607e32d7fc678b9e84ce849082a1d57c3feaf4a45ab5c766edc8
-
Filesize
22KB
MD592dc6ef532fbb4a5c3201469a5b5eb63
SHA13e89ff837147c16b4e41c30d6c796374e0b8e62c
SHA2569884e9d1b4f8a873ccbd81f8ad0ae257776d2348d027d811a56475e028360d87
SHA5129908e573921d5dbc3454a1c0a6c969ab8a81cc2e8b5385391d46b1a738fb06a76aa3282e0e58d0d2ffa6f27c85668cd5178e1500b8a39b1bbae04366ae6a86d3
-
Filesize
160KB
-
Filesize
160KB
-
Filesize
4KB
-
Filesize
1.2MB