Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    20/08/2024, 09:24

General

  • Target

    a2ba394fea337797d86c0897e97731d0N.exe

  • Size

    236KB

  • MD5

    a2ba394fea337797d86c0897e97731d0

  • SHA1

    f9bf491ea0fa75640d4df2007a3e7a1795fd0726

  • SHA256

    a53d764bdf722163fa6aafeb2974b3f3994b82f4e40765271c5d3fa59ca20b14

  • SHA512

    58066f8febea269706d9b5b2beb62847da35ecaac498b1a82cf83e1440920f08626f7cce828a333385eb6a1c29a62f22d4a2bd28d8f08108b943d941a1ed9282

  • SSDEEP

    3072:PJ0Bs3o8A4M3riN6MhGkgS3PL6pb9t16n5OkhBOPC/f/FnncroP9:xwDeM7iNEkgiOb31k1ECPJ/F

Score
7/10

Malware Config

Signatures

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\a2ba394fea337797d86c0897e97731d0N.exe
    "C:\Users\Admin\AppData\Local\Temp\a2ba394fea337797d86c0897e97731d0N.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2676

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\rifaien2-M3NX0bUGzxbYjmiq.exe

    Filesize

    236KB

    MD5

    479091c08f335592f63795e1f03753ec

    SHA1

    7a15c20776ce6878f0691d9642e4494b4b1ac12a

    SHA256

    f64201bfcf9e9da81deb87bf41b33f5dc2f24264247d3bb27023e17c78e664ca

    SHA512

    26bb5f0977dc9b4b8ec4c52e732de9ef0d4862e8b138a43f2ce904dea476b910768ccb6c4b7e199134564fe838557d321a6fd1cfad5c17fb6728b968d16a2d32

  • memory/2676-0-0x0000000000400000-0x000000000043B000-memory.dmp

    Filesize

    236KB

  • memory/2676-1-0x0000000000400000-0x000000000043B000-memory.dmp

    Filesize

    236KB