Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    09/05/2024, 01:40

General

  • Target

    hsanjhzj/QQFace.exe

  • Size

    48KB

  • MD5

    e6a695e1740df1546f4c09c41cab605e

  • SHA1

    454bc5a396e7c638454fd05f10daa80caf216a03

  • SHA256

    43fa52bf5a910bbce53fc1db6dcfcd69aeb855d4dad3db7dbce802caeafff1d7

  • SHA512

    d333e98a80f0655ae71fb027982c6216f154cccb2d293629d6e0a93a09630deccabf26c8e45cc67483b24a5dbb7289a6c9ad0c0058b3515437990d1be28cffda

  • SSDEEP

    1536:fPgXwpm4RmzZwCnUF2ICqdkJI6SA+hWo1y:fPgXLdqF2fqdkJIF8

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 5 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\hsanjhzj\QQFace.exe
    "C:\Users\Admin\AppData\Local\Temp\hsanjhzj\QQFace.exe"
    1⤵
    • Loads dropped DLL
    PID:2036

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\nsi2DC6.tmp\NSISdl.dll

    Filesize

    12KB

    MD5

    ed1a0e9f2e43d0b9911c20830bf9c70b

    SHA1

    6dc197bea1dcf81444148fb7cf963dc5f0fdda7d

    SHA256

    eb2aae4b1168d2cea71975ade37869988fab95346b8d4e8948dfa5b102f62f69

    SHA512

    6fb0210958b7579656e9f793adf4a03e2d5619ac6d76ecd2ce7ad8402bfe3273db68a04e551d8e3e76b6e9fd4fc09b5a3714db1e2da61c023ed998365427bed5

  • \Users\Admin\AppData\Local\Temp\nsi2DC6.tmp\System.dll

    Filesize

    10KB

    MD5

    10c44246d99a1c2e5f5e6b52b111a63d

    SHA1

    0f41da79c3e789f4ae38738e3a5d73c538f8af4f

    SHA256

    7a24883bdbf08ce90938094b6ab6f09a842af10b18b8ae4d70da2e6b806490b8

    SHA512

    e5b0fa27cd02a67be5eb9c63646621d3e9ccfada98659c50dee8310a58ce12e1a6a059788b85f0f440067ed7e281a0e1a526b9403993b9000f91a51bfbb50da3