Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

6bdfce6fa4...0N.exe

windows7-x64

7

6bdfce6fa4...0N.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    15s
  • max time network
    16s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    22/08/2024, 13:09

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    6bdfce6fa413b645b69af017fa0a6f60N.exe

  • Size

    89KB

  • MD5

    6bdfce6fa413b645b69af017fa0a6f60

  • SHA1

    19b6f58c7383c668f451e9952e5718b7036ce37e

  • SHA256

    696b3e7585a304ff97c3b0d1659ac421be93a6221e4ac081ff24830aa3a956bd

  • SHA512

    437c1e51f8ae8f07d607d4b297779c53194f4d1326f943e944eaca6fc24568334e22687c979f0e205d5df6a0b59ef20c666970ceeb7321ee5760a507f234f250

  • SSDEEP

    1536:hZ/B5xUYrSdSJFlw8jUa/ux1M5q5nm0Drr9nf4:RzrF5jUx1MxurrJf4

Score
7/10
upx

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 1 IoCs
  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Drops file in System32 directory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\6bdfce6fa413b645b69af017fa0a6f60N.exe
    "C:\Users\Admin\AppData\Local\Temp\6bdfce6fa413b645b69af017fa0a6f60N.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in System32 directory
    PID:2132
    • C:\Windows\SysWOW64\mtifoop-onix.exe
      "C:\Windows\SysWOW64\mtifoop-onix.exe"
      2⤵
      • Executes dropped EXE
      PID:2496

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Windows\SysWOW64\mtifoop-onix.exe
    Filesize

    86KB

    MD5

    a8b767cf0e3d2fba18e479aa02e9fb18

    SHA1

    6c26a1a736624202f05b437447cb1ccf2d9ba572

    SHA256

    745021c2895e936abc3012e6a75f0aa710b7668fee0b4f7ffe3313086c33d039

    SHA512

    3485ef336523f9758052fbbab187c8aa22215c152fab25ebbeea756ff4cc432571ba93018d143d6d1ac231ea9710aaf5d24293739d0d320d4b7dddd244ea9259

    Download Submit

  • memory/2132-7-0x0000000000400000-0x0000000000403000-memory.dmp

    Filesize

    12KB

    Download

  • memory/2132-4-0x0000000000020000-0x0000000000038000-memory.dmp

    Filesize

    96KB

    Download

  • memory/2496-6-0x0000000000400000-0x0000000000418000-memory.dmp

    Filesize

    96KB

    Download