Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    12/07/2024, 07:33

General

  • Target

    $PLUGINSDIR/dllstub.exe

  • Size

    125KB

  • MD5

    00b903615e980d3bd057d272f195a455

  • SHA1

    f7546e4e35fe2faf8e7eff0a4100904e1357bc35

  • SHA256

    77e76c425ba4dfc6612cfff1cfa272180e794d7bcc0366afa629b2a2a2277ac7

  • SHA512

    bbd09e8bfabf8577a05007cc3c46e7d1cd687932927312dde559c19f1b2b912daa21cf14cf5f1678588f5ad7bb8a386c8f45eb4b8fced2dee3891cb65c72f4eb

  • SSDEEP

    3072:sgXdZt9P6D3XJBrsINhDmvKyOuee8a1PiYyTwDGvKyOw:se34wcDmvKy7eDa5yTwyvKyp

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 2 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\dllstub.exe
    "C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\dllstub.exe"
    1⤵
    • Loads dropped DLL
    PID:2548

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\nsoBFD7.tmp\inetc.dll

    Filesize

    24KB

    MD5

    1efbbf5a54eb145a1a422046fd8dfb2c

    SHA1

    ec4efd0a95bb72fd4cf47423647e33e5a3fddf26

    SHA256

    983859570099b941c19d5eb9755eda19dd21f63e8ccad70f6e93f055c329d341

    SHA512

    7fdeba8c961f3507162eb59fb8b9b934812d449cc85c924f61722a099618d771fed91cfb3944e10479280b73648a9a5cbb23482d7b7f8bfb130f23e8fd6c15fb