Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    13/06/2024, 23:09

General

  • Target

    Blurring.exe

  • Size

    7.4MB

  • MD5

    14823b7fbd29e24f1e3fd5d196328c96

  • SHA1

    f0d7d8e10dbc47f0cf65b05a5c8181fd47180e30

  • SHA256

    8fac3021eff7ca7f40f998c4855aba988b1e7926b6cb510f13955cb2d9c79b05

  • SHA512

    633af59418d62b7bd491ed7259d0697a9e6fc91a9034781a07363f04101f0bb79ab4a7b4e926fec4212ad7103bfe4bec529a9906458eef6e7c110b466dccafec

  • SSDEEP

    196608:uqqQTDRrjuBA1HeT39IigjvKub75bcjWgbFzf9/kAbDCsj9m:3J1+TtIiavB5IjWqFz1TN

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Blurring.exe
    "C:\Users\Admin\AppData\Local\Temp\Blurring.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1720
    • C:\Users\Admin\AppData\Local\Temp\Blurring.exe
      "C:\Users\Admin\AppData\Local\Temp\Blurring.exe"
      2⤵
      • Loads dropped DLL
      PID:2604

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\_MEI17202\python312.dll

    Filesize

    6.7MB

    MD5

    550288a078dffc3430c08da888e70810

    SHA1

    01b1d31f37fb3fd81d893cc5e4a258e976f5884f

    SHA256

    789a42ac160cef98f8925cb347473eeeb4e70f5513242e7faba5139ba06edf2d

    SHA512

    7244432fc3716f7ef27630d4e8fbc8180a2542aa97a01d44dca260ab43966dd8ac98b6023400b0478a4809aace1a128f1f4d6e544f2e591a5b436fd4c8a9d723