Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
17/04/2024, 04:28
General
-
Target
0e3b1c329573011e4e411be8375b5add6736b83983ebbe1581be3fe39c4618e8.exe
-
Size
816KB
-
MD5
4fe2e2dde69304e62b0cf09bddd030c9
-
SHA1
44e62b04ea6c564c0f940c1c3f6cf556fe39a6c4
-
SHA256
0e3b1c329573011e4e411be8375b5add6736b83983ebbe1581be3fe39c4618e8
-
SHA512
4e8e9bb264246213621f02cf9fec8bff15ff3db7284dc99fac34c70a54002dcbe8c6c4ad249d0a4fbd2fba94aad544c516bc1da9c4741e4871bdbd86121a2572
-
SSDEEP
24576:hY4G2qLMJalsnqShyoo77lUabuSvbDQOOdIxJsG93:e3XZynV4oDabuWbDQOcIxJJ93
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0e3b1c329573011e4e411be8375b5add6736b83983ebbe1581be3fe39c4618e8.exe"C:\Users\Admin\AppData\Local\Temp\0e3b1c329573011e4e411be8375b5add6736b83983ebbe1581be3fe39c4618e8.exe"1⤵
- Loads dropped DLL
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\1F0D0E0B120A156E155F15D0B0C160D0D160C.exeC:\Users\Admin\AppData\Local\Temp\1F0D0E0B120A156E155F15D0B0C160D0D160C.exe2⤵
- Executes dropped EXE
- Suspicious use of NtSetInformationThreadHideFromDebugger
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
816KB
MD5b276901bd356129d7ddd8655aa8151b4
SHA1e7569605ca1f37813ff09fad925bc660fb035d19
SHA2561765e3bffb3ec2e6ec8765cc4656eb8a32947f65c7118eb7ea996d75c8a87812
SHA512c021ab45eecd4af90f14e9d757b7724d52d4c77edd8cda6c4e3b76ba35cdb4fafaeec9c6e093ae6497c8c49efa6d31a2bc00a10862631e2e387972340411f233
-
Filesize
1.7MB
-
Filesize
1.7MB
-
Filesize
1.7MB
-
Filesize
1.7MB
-
Filesize
1.7MB
-
Filesize
1.7MB
-
Filesize
1.7MB
-
Filesize
1.7MB