Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
27/03/2024, 17:29
General
-
Target
0c809f8c29765378e1ecdf7a63971f95772c0b863537949f6a9796fd0dc1b1ae.exe
-
Size
479KB
-
MD5
051b656101c4960c4eb3f95a48f77a50
-
SHA1
08ce1cb9b89305e61a0f142a56e1e2cfea9d1ca7
-
SHA256
0c809f8c29765378e1ecdf7a63971f95772c0b863537949f6a9796fd0dc1b1ae
-
SHA512
435e5b359c03299dc022bde96bf2dffab8f7587609e9055539bcbf75d325294c3f36408953b6c8d712349e692aae3ba5a73546f956bb58089bd9d9c85eb4b911
-
SSDEEP
12288:GQycVVXv0VtdW/sEzrWtHOw0iFauY/B/dEc0i3rALrbEcgYwuGggfcj:DcVtdW/sEzrWtHOw0iFauY/B/dEc0i3i
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0c809f8c29765378e1ecdf7a63971f95772c0b863537949f6a9796fd0dc1b1ae.exe"C:\Users\Admin\AppData\Local\Temp\0c809f8c29765378e1ecdf7a63971f95772c0b863537949f6a9796fd0dc1b1ae.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\0c809f8c29765378e1ecdf7a63971f95772c0b863537949f6a9796fd0dc1b1ae.exeC:\Users\Admin\AppData\Local\Temp\0c809f8c29765378e1ecdf7a63971f95772c0b863537949f6a9796fd0dc1b1ae.exe2⤵
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
479KB
MD5263a4ef4323b4d3d5fdc724debaa1871
SHA1d54346b9c4b52bfdd17b5417581a91eed1ecb248
SHA25682198d48f793c2e17c5679aca638ab86478e6483e71f086aa476d033e06286fb
SHA512d2003986f7447c35de8fd077ae016f10a3f8b1e04de5a8305680eaba8e55ee999f153938338895450d5fff6588447a44a37b4c5606593a2bb27f8038764c426f
-
Filesize
220KB
-
Filesize
220KB
-
Filesize
220KB
-
Filesize
104KB
-
Filesize
220KB