Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
-
submitted
17/06/2024, 00:17
General
-
Target
9c3e93dc65aed92fd0d19854eb95284a60ee3efddd9dcc212278d25e397643a9.exe
-
Size
566KB
-
MD5
9f330fbf2c451270d31e3cd3ed00784c
-
SHA1
c97c4c846c87792945f4151e63771a7105b9655c
-
SHA256
9c3e93dc65aed92fd0d19854eb95284a60ee3efddd9dcc212278d25e397643a9
-
SHA512
50c241d63207a72c177e64b38310b6c03e4a47458b090f2a76543aca7cdfee4332ad0439c2d3b48b7ae63c5d19a0280886633a4280dcc25fe8d9074b7bf060a7
-
SSDEEP
12288:IWBm+95nHfF2mgewFm5fFBCwmLLNC17k1kfgjdkA7YdfPgvF:IWBz95ndbgfm59wLNC17/gjT7YdfYvF
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\9c3e93dc65aed92fd0d19854eb95284a60ee3efddd9dcc212278d25e397643a9.exe"C:\Users\Admin\AppData\Local\Temp\9c3e93dc65aed92fd0d19854eb95284a60ee3efddd9dcc212278d25e397643a9.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\2349.tmp"C:\Users\Admin\AppData\Local\Temp\2349.tmp" --pingC:\Users\Admin\AppData\Local\Temp\9c3e93dc65aed92fd0d19854eb95284a60ee3efddd9dcc212278d25e397643a9.exe 3020A4C29918BF3E8CF9CFF7D2E0FD1CF5A07202FEA93B1BA15C5CBBF52269EAD6840C8207142CD43135099C5AE47A88D4034D891335B5AFE267CA8FFB707D392⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
566KB
MD546a389d67ff2ddbd06adf4f53d17d332
SHA1a0a755596751982e59c34cd0088fef597cb0b5d4
SHA256616bc496143f53c92c705626a8e8126a8b5a5a76350a3bdaa9cdb34576b031a6
SHA512ccb78b9396d1ec234bcc44af2db503159130bb71a948fdf3fccb3defc272bb31fc7d6acf1d2658bfa7a925b449f627da2d394c232e780b52d578f4414cb746b8
-
Filesize
580KB
-
Filesize
580KB
-
Filesize
580KB
-
Filesize
580KB