Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

5301d33697...bd.exe

windows10-1703-x64

6

5301d33697...bd.exe

windows7-x64

7

5301d33697...bd.exe

windows10-1703-x64

6

5301d33697...bd.exe

windows10-2004-x64

6

5301d33697...bd.exe

windows11-21h2-x64

6

Resubmissions

17/04/2024, 12:39

240417-pvnqqsgh5z 7

17/04/2024, 12:39

240417-pvnezafc92 7

17/04/2024, 12:39

240417-pvmtfafc88 7

17/04/2024, 12:38

240417-pvj3jsgh5v 6

17/04/2024, 12:38

240417-pvjrsagh5s 6

16/04/2024, 13:52

240416-q6kznadb91 6

Analysis

  • max time kernel
    1167s
  • max time network
    1196s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    17/04/2024, 12:39

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    5301d33697d41ef717efa88cf8bb93fcce33a15a4f8280c1e95e8276325455bd.exe

  • Size

    230KB

  • MD5

    d6f9162872d922af8a5132aa86e2f195

  • SHA1

    8cea7dd201bed9e282d010027e3ea9bc0977ed5b

  • SHA256

    5301d33697d41ef717efa88cf8bb93fcce33a15a4f8280c1e95e8276325455bd

  • SHA512

    64440492554ef094e6204244968126811c6396cfba2d0f65733c48fd6e76e92fac6ada95912127712d9258cf7c8e24acffb2f1d4fda102bb618e8be3b842625d

  • SSDEEP

    6144:GeZ5aVBzQh/9hnth+r4GNG+dFib/xECWzYA80DVCWzXYYDJUYF1wFZoM/vQDZf6Q:mzzQhW

Score
7/10
persistence

Malware Config

Signatures

  • Unexpected DNS network traffic destination 1 IoCs

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Adds Run key to start application 2 TTPs 1 IoCs
    persistence
  • Uses Tor communications 1 TTPs

    Malware can proxy its traffic through Tor for more anonymity.

Processes

  • C:\Users\Admin\AppData\Local\Temp\5301d33697d41ef717efa88cf8bb93fcce33a15a4f8280c1e95e8276325455bd.exe
    "C:\Users\Admin\AppData\Local\Temp\5301d33697d41ef717efa88cf8bb93fcce33a15a4f8280c1e95e8276325455bd.exe"
    1⤵
    • Adds Run key to start application
    PID:1392

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\cached-consensus
    Filesize

    3.1MB

    MD5

    9e340f28ea274cd30be77bdb0efc6f15

    SHA1

    2cc5ec8066027b38a6ce73553f08293344cde747

    SHA256

    98998136e48bb30b3539d81592717df018451ff81a209fec779c9d7ef7bec706

    SHA512

    aefc5ee794467fd5311e757a097fea44a9bfa2a9205d8264c2e011b9e612736e5347526986c46c3513b7ab44690fb101f5f25efa5170c709688dda59db5a7714

    Download Submit