Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
-
submitted
05/06/2024, 18:09
General
-
Target
01df46ee19ba2ba5139156ed8168530f038d9258f708f079bf2321c4287032ba.exe
-
Size
6.0MB
-
MD5
df060fa1673bf443f619358852678bd7
-
SHA1
54e14af8ed944bfbc76492186530bf9a743504f1
-
SHA256
01df46ee19ba2ba5139156ed8168530f038d9258f708f079bf2321c4287032ba
-
SHA512
1d80a41312204c583e09214d8f4890fd3137090ff1680f59871d39f2483ba68764de2719d09169a592521d24b95deae5ec24df50abe1218adbe99a20c3e58c88
-
SSDEEP
98304:emhd1UryeDc272cVCafWYpxNV7wQqZUha5jtSyZIUS:eljc2qy4exN2QbaZtlir
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\01df46ee19ba2ba5139156ed8168530f038d9258f708f079bf2321c4287032ba.exe"C:\Users\Admin\AppData\Local\Temp\01df46ee19ba2ba5139156ed8168530f038d9258f708f079bf2321c4287032ba.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\1F72.tmp"C:\Users\Admin\AppData\Local\Temp\1F72.tmp" --splashC:\Users\Admin\AppData\Local\Temp\01df46ee19ba2ba5139156ed8168530f038d9258f708f079bf2321c4287032ba.exe 197C39145440CF1A33FA516886EED28C2348B7D7EB8F5CF8E162789920BBBFDA4B68751942FAC90AF9C133B0CE7B4506F9BE7A52B76950E1512BE2FF7810C6062⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
6.0MB
MD5cc771b1ffa2b1c8e7915e2db1d8e234c
SHA1c5558c22fa5194c7728890393f78023485cdf3fd
SHA25645b246a318d4f641bbc96a01eba7e6abf873f0f105dfd5fa81e278743e7628b0
SHA5120e8131f394f41fbd82b0a2c25ac0481e53591a90fb3b8f009d3254212641a44b43285181df3e06cdcc73a58179a193741593adf53fa279af16f8220945c36098
-
Filesize
4.3MB
-
Filesize
4.3MB