Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    90s
  • max time network
    91s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    23/07/2024, 08:37

General

  • Target

    90419ca746a338ddd25f8cbc67669f30N.exe

  • Size

    236KB

  • MD5

    90419ca746a338ddd25f8cbc67669f30

  • SHA1

    91a930ea0506ed75fa30053127ef1b44d2c596cc

  • SHA256

    1b49f63b6dfeafa76cba86803f967ee40a550c858f506179377f04bad9e24757

  • SHA512

    1da434e85d892731a85d7d7958eb905d9b2a096210332660031d3ee1322a9fdb8240d2bd49533766340729880fc385d18a1940acbf313779845f0fcfbf4c2559

  • SSDEEP

    3072:/J0Bs3o8A4M3riN6MhGkgS3PL6pb9t16n5OkhBOPC/z/FnncroP9:hwDeM7iNEkgiOb31k1ECjJ/F

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\90419ca746a338ddd25f8cbc67669f30N.exe
    "C:\Users\Admin\AppData\Local\Temp\90419ca746a338ddd25f8cbc67669f30N.exe"
    1⤵
      PID:3000

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Temp\rifaien2-rN9WAVrWx0hWpI45.exe

      Filesize

      236KB

      MD5

      40c61db45e52f3089f6c72e3ec03ad23

      SHA1

      dde2cea9c7bf5e8659c3e2f9377c0184aff53900

      SHA256

      5c4c8dd678639fa70ec611ea2f300d758632f5ef42f49f6fb63ec5a7e19f1871

      SHA512

      a5f869c924e265123db570c239ee86d9ce3a5fd1737cad1a6f4a57fe2845da9a7001b4e71ba7260892cd3f15993902d22ff2fe5b5758acfb107b6dfd9997bb07

    • memory/3000-0-0x0000000000400000-0x000000000043B000-memory.dmp

      Filesize

      236KB

    • memory/3000-1-0x0000000000400000-0x000000000043B000-memory.dmp

      Filesize

      236KB