Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    90s
  • max time network
    96s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    26/07/2024, 12:14

General

  • Target

    082838262284f3de9666a7d18751d5a0N.exe

  • Size

    236KB

  • MD5

    082838262284f3de9666a7d18751d5a0

  • SHA1

    ca7ee33501034da22a515dbf715b8d1e20c02786

  • SHA256

    eb211f64579637e9ad028dea9cb075246b53f6eddadc8901abe943bf69ed9eea

  • SHA512

    ffb8e11bc49cf02ca1b6260b3fe8f9542a1e56de291500436dfd5b4fab7f7fda6a5b626c4dfd7f2946b1a639ab03811480c742148b7fa457bfd1ad9b11e2fccd

  • SSDEEP

    3072:RJ0Bs3o8A4M3riN6MhGkgS3PL6pb9t16n5OkhBOPC/N/FnncroP9:bwDeM7iNEkgiOb31k1ECJJ/F

Score
7/10

Malware Config

Signatures

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\082838262284f3de9666a7d18751d5a0N.exe
    "C:\Users\Admin\AppData\Local\Temp\082838262284f3de9666a7d18751d5a0N.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2076

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\rifaien2-SmWptE4WCqGsxHdb.exe

    Filesize

    236KB

    MD5

    d744f0143b7d9265359f730c924cedaf

    SHA1

    18fb7b16498153ea08831eb316dcb47b7592e22c

    SHA256

    c94c2d7861993942b83f8ff1c6198e4b7b3d2b7a5cc7eb02e40805eb3430a003

    SHA512

    acbdb8e5a88ba7065b671beeb355de62bdaa10c8f68c5d057938f701e2157645c460cbf1bede81fd9103967f2be4efb13c03797cb19838caa90cf2947ad5d1ba

  • memory/2076-0-0x0000000000400000-0x000000000043B000-memory.dmp

    Filesize

    236KB

  • memory/2076-1-0x0000000000400000-0x000000000043B000-memory.dmp

    Filesize

    236KB