Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    90s
  • max time network
    92s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    02/08/2024, 22:31

General

  • Target

    108f1e8688739244faeb5d2dc6e87160N.exe

  • Size

    236KB

  • MD5

    108f1e8688739244faeb5d2dc6e87160

  • SHA1

    dcd09965aa7273cf7543dfa07ef7a648aa3fc7b5

  • SHA256

    0c5e6337936bc686ed1457852dc3c8abb00c1d0b00d385aec5b2718aa6d7be36

  • SHA512

    9456ef33a1baa73785f47061c80b3481fd262a5e40f1a1592aa6ba730893b2d6b5e63a09b5513218dc6bef0b43f5c0c9ed84bd218f8befe7650de3da4fb6b371

  • SSDEEP

    3072:3J0Bs3o8A4M3riN6MhGkgS3PL6pb9t16n5OkhBOPC/T/FnncroP9:ZwDeM7iNEkgiOb31k1ECTJ/F

Score
7/10

Malware Config

Signatures

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\108f1e8688739244faeb5d2dc6e87160N.exe
    "C:\Users\Admin\AppData\Local\Temp\108f1e8688739244faeb5d2dc6e87160N.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2672

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\rifaien2-pBGNH0WVvi92yUKC.exe

    Filesize

    236KB

    MD5

    1e57aff86a2237c33572e28e9f2971be

    SHA1

    02c423f8f0a2569be9994b67d6c62823c76f0f13

    SHA256

    951f97d0d2dd6e5ca13f2eafe27db3c44a51a1514a5f523f427bb151977e9c20

    SHA512

    7549243fdd116a1ce07213e008328f2f282dbe2bd3fb3da44ee4bdc341879d9f6f5be936b60765362279071618fc6c156d1abb567621b1e13acab77ead861bd9

  • memory/2672-0-0x0000000000400000-0x000000000043B000-memory.dmp

    Filesize

    236KB

  • memory/2672-1-0x0000000000400000-0x000000000043B000-memory.dmp

    Filesize

    236KB