Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    20/08/2024, 16:49 UTC

General

  • Target

    b4fd6c14a535d2dae92e5e62d831f9f0N.exe

  • Size

    157KB

  • MD5

    b4fd6c14a535d2dae92e5e62d831f9f0

  • SHA1

    1ff3bf061ee93dcc59c7702050727575af74dbc9

  • SHA256

    ce07201ce9901a4ccc835692632a6c7dbaee1066260b5112daa5807e824d1dc1

  • SHA512

    1db80326bd8579c26cef728b3826a9b5e38d7488de7e1d4fbe5a3b09c649597890ad1f1ceae0313b3e4b9cfacaa906804abd0535f926e01559c25d506e6ce45f

  • SSDEEP

    1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8zxQibTmXadjUSbcDemTPAZk+cLtdNlb9:fnyiQSoc6W2QZwKS7j

Score
7/10

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\b4fd6c14a535d2dae92e5e62d831f9f0N.exe
    "C:\Users\Admin\AppData\Local\Temp\b4fd6c14a535d2dae92e5e62d831f9f0N.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2400

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2400-0-0x0000000000400000-0x000000000040B000-memory.dmp

    Filesize

    44KB

  • memory/2400-1-0x0000000000400000-0x000000000040B000-memory.dmp

    Filesize

    44KB

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.