Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    24/07/2024, 08:09

General

  • Target

    SCPDF3/SolidHost.exe

  • Size

    16KB

  • MD5

    2c62f35e3f5a70c403d184c1a2ce2c03

  • SHA1

    cb4b3fea2dbc99fc12eb83f04039ebe741741510

  • SHA256

    1fc240067cbd94384a3384dc30db373da0daf60e68a85a057ef4734d96ab81dc

  • SHA512

    3dccfb517056a59804971d65f14089e41226c75430c06d655672baab624a9e0c970107a26d9be7900c0e8e846d0fe59f9280d6f23334bd62c6ea3c7f45c69ac6

  • SSDEEP

    96:wvLNbNeK9+wUC6zy1TwSeM/y4/DVbbCyGGK89b99c0ox:cpB6C6zydwSeMq4/JPCyt99A

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SCPDF3\SolidHost.exe
    "C:\Users\Admin\AppData\Local\Temp\SCPDF3\SolidHost.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of AdjustPrivilegeToken
    PID:2892

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2892-0-0x0000000074D61000-0x0000000074D62000-memory.dmp

    Filesize

    4KB

  • memory/2892-1-0x0000000074D60000-0x000000007530B000-memory.dmp

    Filesize

    5.7MB

  • memory/2892-2-0x0000000074D60000-0x000000007530B000-memory.dmp

    Filesize

    5.7MB

  • memory/2892-3-0x0000000074D60000-0x000000007530B000-memory.dmp

    Filesize

    5.7MB