Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
27/03/2024, 16:40
General
-
Target
e221652ba4c83a0d97e7b9e787b26a09.exe
-
Size
443KB
-
MD5
e221652ba4c83a0d97e7b9e787b26a09
-
SHA1
bd7439c5f41736933d85c310280b6fea54d93781
-
SHA256
08d04e7168869300fdd6d77c072d06fdc31ea5037d3ec929b205306809403e4b
-
SHA512
137fb8c1070c781c8ff5ba02c8079aa73288c7e4a95e84bbcf8a20cbeac744bdde53453f495c863256c3218c6b2d7bc65fda5bad965c579f7ed7e11d2c627051
-
SSDEEP
12288:dVV6fzF64n5ToGk8DUrvOt91UkHq0y93Z+5J4Qny:TVi/etXqrzHq04+5J4Qny
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
UPX packed file 5 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Modifies Internet Explorer settings 1 TTPs 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of SendNotifyMessage 2 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\e221652ba4c83a0d97e7b9e787b26a09.exe"C:\Users\Admin\AppData\Local\Temp\e221652ba4c83a0d97e7b9e787b26a09.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\ProgramData\jJ01803ImBjM01803\jJ01803ImBjM01803.exe"C:\ProgramData\jJ01803ImBjM01803\jJ01803ImBjM01803.exe" "C:\Users\Admin\AppData\Local\Temp\e221652ba4c83a0d97e7b9e787b26a09.exe"2⤵
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
- Modifies Internet Explorer settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
192B
MD56f3a40d0d45276043d646029d5474205
SHA15ec91b403ebff61a070789d4d762eb2e35c4cd4d
SHA256b6731ddde926374eba8ab801015c33eb8463654c2daa73bbf6860bb7475abc6c
SHA51228e5904f30ab56bcf08efd9ec333447f616836d1320b874fc57ac2111c6deaf67b3b39af557f04e12b581f42fa36197cb344e523b074f5f4b2b6da4a755c07e0
-
Filesize
443KB
MD5bbcbd495a0c404cb66f90e39033f6803
SHA1a9ed999529f265877f02abcf8bb03062cb2b2663
SHA256ff8903d873d295a3c37bbb049bdcf71b873f0eda3cef285b51ebd7276a78491e
SHA512b720cd548694ef7f834c2a000c9451e0b937ca495d34f1398eeb63952a5b647e4495b4308c1f54fb018d7f0e0ff4c1e9506ecdcf78fa3eaeca5483f83769deda
-
Filesize
776KB
-
Filesize
1024KB
-
Filesize
776KB
-
Filesize
1024KB
-
Filesize
776KB
-
Filesize
1024KB
-
Filesize
776KB
-
Filesize
776KB