Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
-
submitted
30/06/2024, 03:06
General
-
Target
9b386de550101f6d1a44d778f36cfde0.exe
-
Size
3.2MB
-
MD5
9b386de550101f6d1a44d778f36cfde0
-
SHA1
5de9079a865abbbe306582bb158b3d837173c127
-
SHA256
66bb097c6aa3460cf3715e0ebf4d0acd508ea180bcc7bb70d78cd476d54a5799
-
SHA512
ca5cde6d1513142ade33c09351c0b098055efb52429f146bd8b9fefae6409404ab106b2ff7e7d286a7d4f367bb42372a8c9788aa1a4c4dcb003744051786ef7f
-
SSDEEP
49152:6zG1BqCBGJdodXAGRe5CFHRoHgmAZf1N2:DBIKRAGRe5K2UZi
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 9 IoCs
-
Program crash 1 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
-
Suspicious use of WriteProcessMemory 8 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\9b386de550101f6d1a44d778f36cfde0.exe"C:\Users\Admin\AppData\Local\Temp\9b386de550101f6d1a44d778f36cfde0.exe"1⤵
- Loads dropped DLL
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\ÅäÖÃ\f769eee.exeC:\Users\Admin\AppData\Local\Temp\ÅäÖÃ\f769eee.exe 2594321892⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1916 -s 6043⤵
- Loads dropped DLL
- Program crash
-
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.2MB
MD58f600143602fb1c29d4751161171e9cb
SHA1d583a56b37b07b7b5fae80035dbe823269da2327
SHA256b182b110db1f57e5e2017a979bc40e304bbe3336c6af6064e5cacbea50332a7f
SHA51233fd3960ba8ce78b879bd6c5b8472c6604989631696dc57f7a87fa9c653740ac24352186483aaf090b246900436d781e56f56d94018b8b23eae4a1aea3fef2d3
-
Filesize
3.6MB
-
Filesize
4KB
-
Filesize
3.6MB
-
Filesize
4KB
-
Filesize
3.6MB
-
Filesize
3.6MB
-
Filesize
3.6MB
-
Filesize
3.6MB