Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
117s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
08/07/2024, 00:13
General
-
Target
7ad794d43d94a77c35e50f11ae3a9a2e74cbf78038e71d428f6966cc026ee3a7.exe
-
Size
190KB
-
MD5
8b572bec3f6736ed4f6825743a15d570
-
SHA1
10b42437d15a3b85b22291e42bbbc6f33e24776c
-
SHA256
7ad794d43d94a77c35e50f11ae3a9a2e74cbf78038e71d428f6966cc026ee3a7
-
SHA512
9abe3aa17d408bc5f0ad3b6e41884ff4abefd8be11986dd09dd7e1e59cf055bf4a6a5e048ef42816aa204f224151f75313cd17a8f3d13c1bd0b8f37306f5abf2
-
SSDEEP
3072:QmdzvUPAyoVFtniwTenBriG3XRfaXy7Ve7d9/c0O73MJLWBbR6mXx5RdETkq:1dzvxiTOaX0Xy7Vex9/c0ODa4nEI
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\7ad794d43d94a77c35e50f11ae3a9a2e74cbf78038e71d428f6966cc026ee3a7.exe"C:\Users\Admin\AppData\Local\Temp\7ad794d43d94a77c35e50f11ae3a9a2e74cbf78038e71d428f6966cc026ee3a7.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\7ad794d43d94a77c35e50f11ae3a9a2e74cbf78038e71d428f6966cc026ee3a7.exeC:\Users\Admin\AppData\Local\Temp\7ad794d43d94a77c35e50f11ae3a9a2e74cbf78038e71d428f6966cc026ee3a7.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
190KB
MD56c0109c2bab5bd395e4c3ddfe2ee2299
SHA158a380e6767ab0ad2801e16042dad56d1ad1adae
SHA25679b0d703e8974d2e634bc29f64918397187dfcbc0015733ba5c3967468878aab
SHA51276241a266c38d5d57b2cda05a2cdbe5a4ae9ccbca21a01cb6045f5d66d707b7d457ba6a456f9b237f6ccfa1fa0fcebbec3b2a5c10c553aa637cb09e06c596efb
-
Filesize
220KB
-
Filesize
220KB
-
Filesize
220KB
-
Filesize
220KB
-
Filesize
104KB