Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
04/04/2024, 20:35
General
-
Target
inbox/100000202580053@msgr_5/photos/DvZVXn-h4rlqSC9Nt75pU_cNojOssc2BxmZ9o7nbGbI.jpg
-
Size
126KB
-
MD5
51df6b86019cfc7e7bb389ea2b41b34c
-
SHA1
b37fbcf8eed889b76e4d2f92e234a60e10ae9829
-
SHA256
b45866e753e01aec5b711902d8a2b475f26b63b4746460a3a8f8b210b213a9c4
-
SHA512
c35928085472efd68af4d9279b2204b93f8e539d612b9dd76b21be95abcf3d08d29e3021f9811091c7c779b17a28329bbf00b1cbd891d94fa4d0b3a85e984b1e
-
SSDEEP
3072:bEzAx9APGhZc6GvrZlTYZnxkjCAau7DLGusiFuDGXUiEsesJeKHvvXtPCRW4yZXp:bEzM9APGz+rDTEnx7uz1VuCEs9AKHvvF
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe "C:\Program Files\Windows Photo Viewer\PhotoViewer.dll", ImageView_Fullscreen C:\Users\Admin\AppData\Local\Temp\inbox\100000202580053@msgr_5\photos\DvZVXn-h4rlqSC9Nt75pU_cNojOssc2BxmZ9o7nbGbI.jpg1⤵
- Suspicious use of FindShellTrayWindow
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
4KB