Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
26/04/2024, 05:42
Behavioral task
behavioral1
Sample
t.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
t.exe
Resource
win10v2004-20240412-en
General
-
Target
t.exe
-
Size
5.2MB
-
MD5
25bcb5469cce5dbf227a2dd29b380e4a
-
SHA1
4cd5e76a78bdfdcd5a7f641de55cab3d3bc75858
-
SHA256
54c971819ecc21be14e4912f0c67e34b683169d11ea9a53512767f428721f971
-
SHA512
f01c190e3ebbe0173f3b6f07fda9f346b7b98a148f80bd3bad64fca160c2f27851569323a5221a2f60eddcdf1855387e4805285ad2e2de63dfafcc70fe8226f9
-
SSDEEP
98304:ins8EBDbyXnSuICDtPfeE/jo6KzA0xZRdp3zi5u5D41fopr26/Y1C/aY9xT9q:ins1DGXSuICteEroxzlxZV3Gu5D4S26c
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 2840 t.exe -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 1988 wrote to memory of 2840 1988 t.exe 29 PID 1988 wrote to memory of 2840 1988 t.exe 29 PID 1988 wrote to memory of 2840 1988 t.exe 29
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4.2MB
MD5384349987b60775d6fc3a6d202c3e1bd
SHA1701cb80c55f859ad4a31c53aa744a00d61e467e5
SHA256f281c2e252ed59dd96726dbb2de529a2b07b818e9cc3799d1ffa9883e3028ed8
SHA5126bf3ef9f08f4fc07461b6ea8d9822568ad0a0f211e471b990f62c6713adb7b6be28b90f206a4ec0673b92bae99597d1c7785381e486f6091265c7df85ff0f9b5