Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    09/04/2024, 19:11

General

  • Target

    15450c8b27cd209bc640d1e07af825d5.exe

  • Size

    409KB

  • MD5

    15450c8b27cd209bc640d1e07af825d5

  • SHA1

    922dffcaf02e4d1727e6f055641d85280402e5ab

  • SHA256

    4b7abdcb2c958a551b20d87025adb7bcb12ab3fe5f063c5b10461c775e7aab8b

  • SHA512

    071891c8af8acb20734a8a7fb326242fcd0c8d899729870aeebb1053cba85e6c8cd98fa70b2ce580244f20a80996c1da491c3d15c06b1c8e3e3ac3b58457e327

  • SSDEEP

    6144:pHY6W+k+wd9gttz1Ia6wnBTulAhgDgFkrUrCmVzGGokgXHmDG/Xlixrh2CVGrlOl:JWz+wdStCwFulBTrUDMJkgXHiL9VRSg

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\15450c8b27cd209bc640d1e07af825d5.exe
    "C:\Users\Admin\AppData\Local\Temp\15450c8b27cd209bc640d1e07af825d5.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: GetForegroundWindowSpam
    PID:2504

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\nso9E05.tmp\ioSpecial.ini

    Filesize

    745B

    MD5

    b8cae57108b37a533271ae6cd86daac4

    SHA1

    bf51727aa2c23df15071904efaadf459f826ec52

    SHA256

    8665b2aff98bff0d8d5841222dbecf64dc90e360280c33bb51114c054796c037

    SHA512

    11db91b4c0379b08baf3dc4a6761d957d32f439cff51fc90885c8233240018f54b2fc9a03c809929a12b67ce09ec34b8a809a710a08f9f203bbe05084cc4d698

  • \Users\Admin\AppData\Local\Temp\nso9E05.tmp\InstallOptions.dll

    Filesize

    12KB

    MD5

    4c7d97d0786ff08b20d0e8315b5fc3cb

    SHA1

    bb6f475e867b2bf55e4cd214bd4ef68e26d70f6c

    SHA256

    75e20f4c5eb00e9e5cb610273023e9d2c36392fa3b664c264b736c7cc2d1ac84

    SHA512

    f37093fd5cdda74d8f7376c60a05b442f884e9d370347c7c39d84eca88f23fbea6221da2e57197acd78c817a74703c49fb28b89d41c3e34817cc9301b0b6485a