Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    04/07/2024, 16:05

General

  • Target

    8b1714d78204dfe7188c9d478a2aceae99491f9a7bc3533487a9aa10cf847e35.exe

  • Size

    712KB

  • MD5

    93464684336b8d66ec8b852f7543104a

  • SHA1

    e1c4f731a70a76e8624e29679890179609312c4d

  • SHA256

    8b1714d78204dfe7188c9d478a2aceae99491f9a7bc3533487a9aa10cf847e35

  • SHA512

    a8fbbd56212fea7d9ff9ed2445368aa9c6e599fa62e72e203e7cdcbc1db628c0157073ee31dc8d4f97a2a4f9a4a7e90d68b7869820c6f4b470d9e88a3435a6ee

  • SSDEEP

    12288:gBnnD1fbWckxfDSn1ddk0ZKZWNV2999RVsBt9BvxBXC:g5DV7kpDm1ZssD299bV0RPy

Score
7/10

Malware Config

Signatures

  • Drops startup file 1 IoCs
  • Adds Run key to start application 2 TTPs 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\8b1714d78204dfe7188c9d478a2aceae99491f9a7bc3533487a9aa10cf847e35.exe
    "C:\Users\Admin\AppData\Local\Temp\8b1714d78204dfe7188c9d478a2aceae99491f9a7bc3533487a9aa10cf847e35.exe"
    1⤵
    • Drops startup file
    • Adds Run key to start application
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:2476

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads