Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
-
submitted
05/05/2024, 02:03
General
-
Target
939d6037b841f2ec3616bf3ea35983417d5fb98f15e6d4958fcca3d51069e049.exe
-
Size
272KB
-
MD5
1d09f0ea514e1ced48730193bef07679
-
SHA1
ccc2f6b71f3a9c60461e8d05ed7082cfcdd3618e
-
SHA256
939d6037b841f2ec3616bf3ea35983417d5fb98f15e6d4958fcca3d51069e049
-
SHA512
b417f23e50a6679de675bd9bd7081d3ee86a568e6564359cdab40c19670ad8d081a1103891a1b5f6fe3afe31f11e2aad6b24ec25f6177389c5638a80fa1cee2d
-
SSDEEP
6144:av42c+QlWIzqSsOHdNkOg/Zg4lPHdKzw6V40saiZ:MjWsIOSsOHvkOg/7P9Mw6VQ5Z
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\939d6037b841f2ec3616bf3ea35983417d5fb98f15e6d4958fcca3d51069e049.exe"C:\Users\Admin\AppData\Local\Temp\939d6037b841f2ec3616bf3ea35983417d5fb98f15e6d4958fcca3d51069e049.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\939d6037b841f2ec3616bf3ea35983417d5fb98f15e6d4958fcca3d51069e049.exeC:\Users\Admin\AppData\Local\Temp\939d6037b841f2ec3616bf3ea35983417d5fb98f15e6d4958fcca3d51069e049.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
272KB
MD54a06706163a8451286f4039dafabd7e5
SHA104d34c1028497f3fe26250ff07052f3ceee195f8
SHA25660e83e9d364cf8af7395bf437f362dbd00ccc5a75d838697685d84e8933d11c0
SHA51265b79a8a1d103cf70bd86aab7348402679c551ddfd3c91b3a6b3b18a6eb9f0731c52fb607c3769307b9af74fe0e1c4638929d091ce11d4898a50e0ec7abda86c
-
Filesize
260KB
-
Filesize
104KB
-
Filesize
260KB
-
Filesize
260KB
-
Filesize
260KB
-
Filesize
260KB