Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
09/06/2024, 00:25
General
-
Target
5eb559f7583e9cdbe0e25bf37e47e440ae04415164c70c1b305fdbb56c6afa85.exe
-
Size
416KB
-
MD5
76f1949648205f27ac7f1116165b9e86
-
SHA1
8d29d660e30ae891971b0a4dfc965e1ffbe4be20
-
SHA256
5eb559f7583e9cdbe0e25bf37e47e440ae04415164c70c1b305fdbb56c6afa85
-
SHA512
55f430ea5c9f7882ab6702723b1312459d308d8fa3acd6f852b017b128280dca9c302397d8c67ad6ea661ed4d3effd1fd56ae9bc5c71492e243a69e4de504bfb
-
SSDEEP
12288:LAFLlBtl5igH0OLfX9aLisvNeOVQ5zCD4TyWNz:LMr5RfX9aLisvNeOVQ5zY4xNz
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\5eb559f7583e9cdbe0e25bf37e47e440ae04415164c70c1b305fdbb56c6afa85.exe"C:\Users\Admin\AppData\Local\Temp\5eb559f7583e9cdbe0e25bf37e47e440ae04415164c70c1b305fdbb56c6afa85.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\5eb559f7583e9cdbe0e25bf37e47e440ae04415164c70c1b305fdbb56c6afa85.exeC:\Users\Admin\AppData\Local\Temp\5eb559f7583e9cdbe0e25bf37e47e440ae04415164c70c1b305fdbb56c6afa85.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
416KB
MD57c1e84d8d83fff79d10f72a8e83ab145
SHA12a639b9e7c041a42e80fc93c361faa24d218edab
SHA256473693fbbae19916a48b39f125b58b7595f879f0d189788bd7c1e7ebcfaf3e4d
SHA512b4675ba2c05a6063305b396acf0d58b4ecabd3c4158fe9e2af6fa6b0a937f55d3987ec07939612af9c8750bc5b5008ed6253630e7e08814ae259af147c530640
-
Filesize
264KB
-
Filesize
264KB
-
Filesize
264KB
-
Filesize
104KB
-
Filesize
264KB