Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
29/05/2024, 17:39
General
-
Target
INLAB CLIENTE.exe
-
Size
3.5MB
-
MD5
080c2c3d5cc7ab1029f12d08b403cc50
-
SHA1
6f0dd3f538a654950c8dfdf9e2a0b0b784a999f0
-
SHA256
84ff9bc30a5062515928c38b3bee7b0b3976c3089e25e3784bd4e78256f36cf1
-
SHA512
ef08eba8ee065777cc77a9191ee0658e015cecceb0fa7fe26555fa600660d9c0e4a7af746ad870faccc6953cfc39f2af713ddc9a5e102e2fb66669bc3cf0602e
-
SSDEEP
98304:ZUSkVbU8a86PGZ/ITGVKdigkgxFquID206I3zv4IF5:OSwa86OVIT2qirg0J3zwg
Score
7/10
Malware Config
Signatures
-
VMProtect packed file 3 IoCs
Detects executables packed with VMProtect commercial packer.
-
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\INLAB CLIENTE.exe"C:\Users\Admin\AppData\Local\Temp\INLAB CLIENTE.exe"1⤵
- Writes to the Master Boot Record (MBR)
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
3.1MB
-
Filesize
4KB
-
Filesize
8.2MB
-
Filesize
8.2MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
8.2MB