Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    18/08/2024, 01:33

General

  • Target

    a2a02cc13ecca61c209a7fa2a36fb28f8592e5e905e2fbebdde7e250fe5106da.exe

  • Size

    2.0MB

  • MD5

    7a0ff6115ba51deb19365b69055bfe87

  • SHA1

    cc17cb0fc3404a1cee33e8402903e1020ce20d31

  • SHA256

    a2a02cc13ecca61c209a7fa2a36fb28f8592e5e905e2fbebdde7e250fe5106da

  • SHA512

    36b84a49d91dd5b081c65008fb6e68acf9be8b3bda0e98b020904d46545a204f085875f42ec839c8e20f524e8f1e9c75c9f81a767a5b82fbcb6346e06ed73936

  • SSDEEP

    49152:ZVAbwuGwKOco09gsJcxlV8fTguPOAItUIrhO5Ov:PApQx5+Mc27g9tfoMv

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\a2a02cc13ecca61c209a7fa2a36fb28f8592e5e905e2fbebdde7e250fe5106da.exe
    "C:\Users\Admin\AppData\Local\Temp\a2a02cc13ecca61c209a7fa2a36fb28f8592e5e905e2fbebdde7e250fe5106da.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2984
    • C:\Users\Admin\AppData\Local\Temp\7zS8AB778C6\setup.exe
      C:\Users\Admin\AppData\Local\Temp\7zS8AB778C6\setup.exe
      2⤵
      • Executes dropped EXE
      PID:2876

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\7zS8AB778C6\setup.exe

    Filesize

    5.2MB

    MD5

    44908c157516d82119d84a3b1c4a31f7

    SHA1

    dea19891d14b4e3598844f624c919b0dc5ce236f

    SHA256

    be21539218a31ff278f218a172b9972f4d8978a281387acdadf9a25b86e30b1a

    SHA512

    5a83d45533202ba573941d041619bd7f17e997f352f73528029d1f07da9a26c4f50f1cf77c822f972b596fa75bd2eeb0bca8170d89343d8b590ba869be058106