Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
19/05/2024, 21:12
Static task
static1
Behavioral task
behavioral1
Sample
48156d56447e76b1e18ca81a780e5663a747b078c850dc45ed3e88975fd00f7e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
48156d56447e76b1e18ca81a780e5663a747b078c850dc45ed3e88975fd00f7e.exe
Resource
win10v2004-20240508-en
General
-
Target
48156d56447e76b1e18ca81a780e5663a747b078c850dc45ed3e88975fd00f7e.exe
-
Size
70KB
-
MD5
312be16e9ca6caaa95967885da70457b
-
SHA1
d9870466599e67f92357f91398e0a898ea13e5d0
-
SHA256
48156d56447e76b1e18ca81a780e5663a747b078c850dc45ed3e88975fd00f7e
-
SHA512
5ee6021d9b23a2e086ab93e96ff2fa8e2d1ee5d8708fc11f9e1250432a7495ed885f4d5d965258f13a2641a66883d170f678c657e8a0325c466c10494279fc12
-
SSDEEP
1536:1qEVrBeB9l909LZ/7OpE4oUj1JYGE5pg/sQRNxc:DVA9lwZ/z4/CQRNK
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
pid Process 1508 ossevec.exe -
Loads dropped DLL 1 IoCs
pid Process 1412 48156d56447e76b1e18ca81a780e5663a747b078c850dc45ed3e88975fd00f7e.exe -
Drops file in System32 directory 2 IoCs
description ioc Process File opened for modification C:\WINDOWS\SysWOW64\ossevec.exe 48156d56447e76b1e18ca81a780e5663a747b078c850dc45ed3e88975fd00f7e.exe File created C:\WINDOWS\SysWOW64\ossevec.exe 48156d56447e76b1e18ca81a780e5663a747b078c850dc45ed3e88975fd00f7e.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\48156d56447e76b1e18ca81a780e5663a747b078c850dc45ed3e88975fd00f7e.exe"C:\Users\Admin\AppData\Local\Temp\48156d56447e76b1e18ca81a780e5663a747b078c850dc45ed3e88975fd00f7e.exe"1⤵
- Loads dropped DLL
- Drops file in System32 directory
PID:1412 -
C:\WINDOWS\SysWOW64\ossevec.exe"C:\WINDOWS\system32\ossevec.exe"2⤵
- Executes dropped EXE
PID:1508
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
66KB
MD5b955fb717f2100e45a01b288f9802622
SHA15a3729749eea9052b5db3c0a3e05d0e8fe4510c3
SHA25697c47ff649158ed066eba98027deb9a29d27df08c7fb846e6b407de3e01232e2
SHA512e7d1d058145de6d715a0cb213d55df3df70665c69e570ac86548bd3c13913c1c26410d1d695a091d9f5e968fd521a3f35dffd7171775ef72153da1a66ada708c