Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

c2836adbd3...55.exe

windows7-x64

7

c2836adbd3...55.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    117s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    21/04/2024, 02:29

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    c2836adbd376e8477e48272d71ea41c3c547cbd1e28b7b6733c7b0a7a0467a55.exe

  • Size

    44KB

  • MD5

    72b9a93e85fde97bd4a29cfb36646153

  • SHA1

    17bc33c920c7d4c37523ed7d23977a2d7ef27524

  • SHA256

    c2836adbd376e8477e48272d71ea41c3c547cbd1e28b7b6733c7b0a7a0467a55

  • SHA512

    149b137ac62e5ea396bff4a592ccbb8515df869ffb890474620f73c66f3619774c71ee6f3ad945eaf777457db63c2d908b3b01bc095af989d7d5aa773549cfb0

  • SSDEEP

    768:ITRfpN0pOy3OzeXmOGXbJOlB2vsLCikGF2xdKJCh5PTnEMen6X2L7UAv7Xh:IHzzeWHXbJGB2EOikptEMs6XW7U0h

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Processes

  • C:\Users\Admin\AppData\Local\Temp\c2836adbd376e8477e48272d71ea41c3c547cbd1e28b7b6733c7b0a7a0467a55.exe
    "C:\Users\Admin\AppData\Local\Temp\c2836adbd376e8477e48272d71ea41c3c547cbd1e28b7b6733c7b0a7a0467a55.exe"
    1⤵
      PID:1736

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\My Downloads\Civilization 3 Full Downloader.exe
      Filesize

      44KB

      MD5

      d79b4c3e45fa64822fd2039bb8b8da52

      SHA1

      2c57d477cc1f28a021833a706ee40981d76f08df

      SHA256

      a0119cea678a617da63d5f43f6db522fea0aa384f21dc29841a4f3fc1ed0e972

      SHA512

      fe3aba628701efcd9b73bda2effa7c1597844182068cec7bd836df79eb78922b88531057b86543e0abfb63828c402ca6f00f454f0616123da364125056105eed

      Download Submit

    • memory/1736-0-0x0000000000400000-0x000000000041A000-memory.dmp

      Filesize

      104KB

      Download

    • memory/1736-101-0x0000000000400000-0x000000000041A000-memory.dmp

      Filesize

      104KB

      Download