Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

main - Copy (10).exe

windows7-x64

1

main - Copy (10).exe

windows10-2004-x64

10

main - Cop...py.exe

windows7-x64

1

main - Cop...py.exe

windows10-2004-x64

10

main - Copy (2).exe

windows7-x64

1

main - Copy (2).exe

windows10-2004-x64

10

main - Cop...py.exe

windows7-x64

1

main - Cop...py.exe

windows10-2004-x64

10

main - Copy (3).exe

windows7-x64

1

main - Copy (3).exe

windows10-2004-x64

10

main - Cop...py.exe

windows7-x64

1

main - Cop...py.exe

windows10-2004-x64

10

main - Copy (4).exe

windows7-x64

1

main - Copy (4).exe

windows10-2004-x64

10

main - Cop...py.exe

windows7-x64

1

main - Cop...py.exe

windows10-2004-x64

10

main - Copy (5).exe

windows7-x64

1

main - Copy (5).exe

windows10-2004-x64

10

main - Cop...py.exe

windows7-x64

1

main - Cop...py.exe

windows10-2004-x64

10

main - Copy (6).exe

windows7-x64

1

main - Copy (6).exe

windows10-2004-x64

1

main - Cop...py.exe

windows7-x64

1

main - Cop...py.exe

windows10-2004-x64

10

main - Copy (7).exe

windows7-x64

1

main - Copy (7).exe

windows10-2004-x64

10

main - Cop...py.exe

windows7-x64

1

main - Cop...py.exe

windows10-2004-x64

10

main - Copy (8).exe

windows7-x64

1

main - Copy (8).exe

windows10-2004-x64

1

main - Cop...py.exe

windows7-x64

1

main - Cop...py.exe

windows10-2004-x64

1

Resubmissions

06/07/2024, 19:03 UTC

240706-xqksaazhrm 10

21/06/2024, 07:08 UTC

240621-hyl8razgpc 10

16/06/2024, 18:48 UTC

240616-xf5ppswgmq 10

16/06/2024, 18:34 UTC

240616-w759wasbqf 10

16/06/2024, 18:21 UTC

240616-wzje5swajj 10

16/06/2024, 18:08 UTC

240616-wqxams1ekf 10

16/06/2024, 17:54 UTC

240616-whbzqsvcrn 10

16/06/2024, 17:41 UTC

240616-v9q3aszhkf 10

16/06/2024, 17:28 UTC

240616-v1237szgpc 10

Analysis

  • max time kernel
    120s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    06/07/2024, 19:03 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    main - Copy (8) - Copy.exe

  • Size

    6.9MB

  • MD5

    22c978ffaefef3389bf29068b9621661

  • SHA1

    5671972c1d70826fb85dced4c83c700dd282ea21

  • SHA256

    e6ee8e9b38e10a92a89e61b8655ca4fedcc381fd93cb36f43fe323132923dfcf

  • SHA512

    8a280cb782f0afab171d2e7955b75362e98cefd449d382004ef2568c2c230cd633a754b1dd5f0dc5e17407819e4dceb5b0cbb2647e279a6ec674b8d9484be26a

  • SSDEEP

    98304:7b5Ak7khMiyw0VREqfnle5EEPbxVhCQHSIMf:5LUMiywZqshDxaQHh

Score
1/10

Malware Config

Signatures

  • Modifies system certificate store 2 TTPs 3 IoCs
    evasionspywaretrojan

Processes

  • C:\Users\Admin\AppData\Local\Temp\main - Copy (8) - Copy.exe
    "C:\Users\Admin\AppData\Local\Temp\main - Copy (8) - Copy.exe"
    1⤵
    • Modifies system certificate store
    PID:1688

Network

  • flag-us
    DNS
    github.com
    main - Copy (8) - Copy.exe
    Remote address:
    8.8.8.8:53
    Request
    github.com
    IN A
    Response
    github.com
    IN A
    20.26.156.215
  • flag-us
    DNS
    objects.githubusercontent.com
    main - Copy (8) - Copy.exe
    Remote address:
    8.8.8.8:53
    Request
    objects.githubusercontent.com
    IN A
    Response
    objects.githubusercontent.com
    IN A
    185.199.110.133
    objects.githubusercontent.com
    IN A
    185.199.109.133
    objects.githubusercontent.com
    IN A
    185.199.108.133
    objects.githubusercontent.com
    IN A
    185.199.111.133
  • 20.26.156.215:443
    github.com
    tls
    main - Copy (8) - Copy.exe
    1.1kB
     8.1kB
     12
    11
  • 185.199.110.133:443
    objects.githubusercontent.com
    tls
    main - Copy (8) - Copy.exe
    783 B
     4.5kB
     10
    9
  • 8.8.8.8:53
    github.com
    dns
    main - Copy (8) - Copy.exe
    56 B
     72 B
     1
    1

    DNS Request

    github.com

    DNS Response

    20.26.156.215

  • 8.8.8.8:53
    objects.githubusercontent.com
    dns
    main - Copy (8) - Copy.exe
    75 B
     139 B
     1
    1

    DNS Request

    objects.githubusercontent.com

    DNS Response

    185.199.110.133
    185.199.109.133
    185.199.108.133
    185.199.111.133

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    5a64440d2ccdb8c3e92c9f8477ddee40

    SHA1

    a0443cb200e0701a41d3eb4cd189a7bbc7b6004d

    SHA256

    91afff29a1675268e2b23ae6ae34832822b8d4c28e95c2c0655b3db7b6f0841c

    SHA512

    c007c2bb0f16240fb2c06da731dc4bd501c671cbeabf4069f836710fea37b289a3edb1a44a6cdca21554a12ffa008ff2a4146a8fd118f1163c50574b8783c226

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\CabAFD1.tmp
    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\TarAFF3.tmp
    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

    Download Submit

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.