Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    112s
  • max time network
    97s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    15/07/2024, 13:44

General

  • Target

    e6b60b0de98fdb4876d11d939a5201e0N.exe

  • Size

    83KB

  • MD5

    e6b60b0de98fdb4876d11d939a5201e0

  • SHA1

    755619797031e9aaa583a77db77a24922535bc68

  • SHA256

    206b29fac332a6d586ad963e0727c3ad11076659a431df0a0afcb7fb29789366

  • SHA512

    021086c77f37a93ae126d3254fbdc5ffa0853eb2efd073cd479838d9761184c85887f6042d5f49b0ae4f7e4c6b0335c7f8090ff80fb3e6067d68132e61697609

  • SSDEEP

    1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+qK:LJ0TAz6Mte4A+aaZx8EnCGVuq

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 6 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\e6b60b0de98fdb4876d11d939a5201e0N.exe
    "C:\Users\Admin\AppData\Local\Temp\e6b60b0de98fdb4876d11d939a5201e0N.exe"
    1⤵
      PID:2488

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Temp\rifaien2-QVbekZauXNszUIpA.exe

      Filesize

      83KB

      MD5

      2eac6c954a37c69376d02ae2bfa601a0

      SHA1

      88a37d2cb69db14a2010a52f1db8fe820e06fdf7

      SHA256

      336e067ba6945303d060654365fb53b34240e82af94d1aebc0d63f4c92e8ba08

      SHA512

      f0d614b9415be63aea6d752daba73471fccb39c279ca96962226a4fea6a7f917130d913f582b33443e3e6200d293fbd23352c4bc0c19b0b6b63ab1c91e61d9e9

    • memory/2488-0-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2488-1-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2488-5-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2488-13-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2488-20-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB