Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    12/06/2024, 07:16

General

  • Target

    0a26acc40985dd32b0e1652d3255dadb.exe

  • Size

    7.6MB

  • MD5

    0a26acc40985dd32b0e1652d3255dadb

  • SHA1

    8231a83da2c207b3820950d677e4604a5415d6a0

  • SHA256

    a97e528437a83823008d910a54f55ae0a7f67beb5d930066dc3dca304b67509b

  • SHA512

    6f0cd31c982c791cb02355eed6c2b5c64e6fa82f9d9db4196c24668eb308f1e4403ba6f213471f4f9fc5d7168c10f3f1cd61a866570bed4bad09b8515a6fbf5d

  • SSDEEP

    12288:mmhMlnZU+IM6XQZ2X5jastLefuZS4g7ti3tIyX4IdMwHMQpsuH+nButLdTO+Qwtc:FhM5UzBifKS4PA

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0a26acc40985dd32b0e1652d3255dadb.exe
    "C:\Users\Admin\AppData\Local\Temp\0a26acc40985dd32b0e1652d3255dadb.exe"
    1⤵
    • Loads dropped DLL
    PID:1928

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Roaming\d3d9.dll

    Filesize

    616KB

    MD5

    0281e5891499f79b8041974b0ffba11d

    SHA1

    11651caeae5df4e45bceb99998956a82baaeea8e

    SHA256

    fe128a0b2dc636ff00cd2fa031442cd1a1e10d0e7da7f74e8e35f17187f2ecef

    SHA512

    0d97639ae8dd4694daa10cc7bc0eb6c778d1ea7bd9a09688f3ebc275c0c719729a55249e224d4f0be62cce86fd2eac9da4e6790f8bd628e3c28964d72599c270

  • memory/1928-0-0x000000007423E000-0x000000007423F000-memory.dmp

    Filesize

    4KB

  • memory/1928-1-0x0000000000E40000-0x0000000000EE0000-memory.dmp

    Filesize

    640KB

  • memory/1928-2-0x0000000000440000-0x0000000000446000-memory.dmp

    Filesize

    24KB

  • memory/1928-7-0x0000000074230000-0x000000007491E000-memory.dmp

    Filesize

    6.9MB

  • memory/1928-8-0x0000000074230000-0x000000007491E000-memory.dmp

    Filesize

    6.9MB

  • memory/1928-9-0x0000000074230000-0x000000007491E000-memory.dmp

    Filesize

    6.9MB