Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    09/04/2024, 19:54

General

  • Target

    7ebafcbe769f7d1c80fed51d42f16e5f.exe

  • Size

    357KB

  • MD5

    7ebafcbe769f7d1c80fed51d42f16e5f

  • SHA1

    ff83ba0d02351c1bcfa1f88e361560db9d4609ee

  • SHA256

    35f8f54e3417795e8d1d7262b0542792ba692a2f44a71ae10e71fc5173bd6d49

  • SHA512

    367727f471ad5780d1116bbfe8d56d012b5244f2f797d60865902fb67ad97504615b1144e1039ae2495dd70159052f239dc9f68c8ba3707a75d430ad73d36a44

  • SSDEEP

    6144:Vu+kBmWicfSPyXTnkl+r+MHLt8TaggWQI9T1S0osk:VAmWip2TnGC+MHL2mgiIF1S0

Score
6/10

Malware Config

Signatures

  • Modifies WinLogon 2 TTPs 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\7ebafcbe769f7d1c80fed51d42f16e5f.exe
    "C:\Users\Admin\AppData\Local\Temp\7ebafcbe769f7d1c80fed51d42f16e5f.exe"
    1⤵
    • Modifies WinLogon
    • Suspicious use of AdjustPrivilegeToken
    PID:2196

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2196-1-0x0000000000680000-0x000000000072A000-memory.dmp

    Filesize

    680KB

  • memory/2196-3-0x0000000000680000-0x000000000072A000-memory.dmp

    Filesize

    680KB

  • memory/2196-5-0x0000000000680000-0x000000000072A000-memory.dmp

    Filesize

    680KB

  • memory/2196-7-0x0000000000680000-0x000000000072A000-memory.dmp

    Filesize

    680KB

  • memory/2196-9-0x0000000000680000-0x000000000072A000-memory.dmp

    Filesize

    680KB

  • memory/2196-11-0x0000000000680000-0x000000000072A000-memory.dmp

    Filesize

    680KB

  • memory/2196-12-0x0000000002060000-0x0000000002119000-memory.dmp

    Filesize

    740KB

  • memory/2196-14-0x0000000002060000-0x0000000002119000-memory.dmp

    Filesize

    740KB

  • memory/2196-15-0x0000000002060000-0x0000000002119000-memory.dmp

    Filesize

    740KB

  • memory/2196-61-0x0000000002060000-0x0000000002119000-memory.dmp

    Filesize

    740KB

  • memory/2196-58-0x0000000000780000-0x0000000000781000-memory.dmp

    Filesize

    4KB

  • memory/2196-56-0x0000000000760000-0x0000000000761000-memory.dmp

    Filesize

    4KB

  • memory/2196-55-0x0000000000770000-0x0000000000771000-memory.dmp

    Filesize

    4KB

  • memory/2196-52-0x0000000000760000-0x0000000000761000-memory.dmp

    Filesize

    4KB

  • memory/2196-50-0x0000000000750000-0x0000000000751000-memory.dmp

    Filesize

    4KB

  • memory/2196-48-0x0000000000730000-0x0000000000731000-memory.dmp

    Filesize

    4KB

  • memory/2196-47-0x0000000000740000-0x0000000000741000-memory.dmp

    Filesize

    4KB

  • memory/2196-44-0x0000000000730000-0x0000000000731000-memory.dmp

    Filesize

    4KB

  • memory/2196-63-0x000000007787F000-0x0000000077880000-memory.dmp

    Filesize

    4KB

  • memory/2196-43-0x00000000005F0000-0x00000000005F1000-memory.dmp

    Filesize

    4KB

  • memory/2196-41-0x0000000000590000-0x0000000000591000-memory.dmp

    Filesize

    4KB

  • memory/2196-40-0x00000000005A0000-0x00000000005A1000-memory.dmp

    Filesize

    4KB

  • memory/2196-36-0x00000000003A0000-0x00000000003A1000-memory.dmp

    Filesize

    4KB

  • memory/2196-34-0x0000000000320000-0x0000000000321000-memory.dmp

    Filesize

    4KB

  • memory/2196-33-0x0000000000330000-0x0000000000331000-memory.dmp

    Filesize

    4KB

  • memory/2196-30-0x0000000000320000-0x0000000000321000-memory.dmp

    Filesize

    4KB

  • memory/2196-29-0x0000000000310000-0x0000000000311000-memory.dmp

    Filesize

    4KB

  • memory/2196-27-0x0000000000170000-0x0000000000171000-memory.dmp

    Filesize

    4KB

  • memory/2196-26-0x0000000000180000-0x0000000000181000-memory.dmp

    Filesize

    4KB

  • memory/2196-23-0x0000000000170000-0x0000000000171000-memory.dmp

    Filesize

    4KB

  • memory/2196-22-0x0000000000120000-0x0000000000121000-memory.dmp

    Filesize

    4KB

  • memory/2196-20-0x00000000000F0000-0x00000000000F1000-memory.dmp

    Filesize

    4KB

  • memory/2196-19-0x0000000000110000-0x0000000000111000-memory.dmp

    Filesize

    4KB

  • memory/2196-18-0x0000000000110000-0x0000000000111000-memory.dmp

    Filesize

    4KB

  • memory/2196-16-0x00000000000F0000-0x00000000000F1000-memory.dmp

    Filesize

    4KB