Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

155绿色�...��.url

windows7-x64

1

155绿色�...��.url

windows10-2004-x64

1

startdelay...02.exe

windows7-x64

7

startdelay...02.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...es.dll

windows7-x64

7

$PLUGINSDI...es.dll

windows10-2004-x64

7

$PLUGINSDI...nu.dll

windows7-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

$PLUGINSDI...re.dll

windows7-x64

3

$PLUGINSDI...re.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...or.dll

windows7-x64

7

$PLUGINSDI...or.dll

windows10-2004-x64

7

$PLUGINSDI...fo.dll

windows7-x64

3

$PLUGINSDI...fo.dll

windows10-2004-x64

3

$PLUGINSDIR/fct.dll

windows7-x64

3

$PLUGINSDIR/fct.dll

windows10-2004-x64

3

$PLUGINSDIR/inetc.dll

windows7-x64

3

$PLUGINSDIR/inetc.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

ComponentF...or.dll

windows7-x64

1

ComponentF...or.dll

windows10-2004-x64

1

ComponentF...it.dll

windows7-x64

1

ComponentF...it.dll

windows10-2004-x64

1

Startup De...er.exe

windows7-x64

1

Startup De...er.exe

windows10-2004-x64

6

Startup Delayer.exe

windows7-x64

3

Startup Delayer.exe

windows10-2004-x64

6

Analysis

  • max time kernel
    149s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    06/09/2024, 12:48

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Startup Delayer.exe

  • Size

    3.9MB

  • MD5

    909e3113d00adfebf817c7c5d971feb6

  • SHA1

    fad10e5fa809f7419ce3d164809ebccc97380968

  • SHA256

    5e134a61372ddfe554ad53e01858023941c890eb2f9828efe9d944f49d99cbb8

  • SHA512

    b35551bf6e3b6e63c5b2b5cb968cec3a8188b96bf930b77d7bb6c9b3cea338c1a1a3972b8afe1423f3c04d2082c3a1024309c532732317af3dae890e59e21da3

  • SSDEEP

    98304:WFputdH6WVeLWV4lfQbj4fqYJj3XdvtoaMzDwxymBGFp4NHvOmNUC2V4nttMkf+K:maH6WVeLWV4lfQbj4fqYJj3XdvtoaMzy

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
    adwarespyware
  • Suspicious behavior: EnumeratesProcesses 21 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Startup Delayer.exe
    "C:\Users\Admin\AppData\Local\Temp\Startup Delayer.exe"
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    PID:2632

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2632-0-0x000007FEF5BBE000-0x000007FEF5BBF000-memory.dmp

    Filesize

    4KB

    Download

  • memory/2632-1-0x000000001B7D0000-0x000000001B854000-memory.dmp

    Filesize

    528KB

    Download

  • memory/2632-2-0x000007FEF5900000-0x000007FEF629D000-memory.dmp

    Filesize

    9.6MB

    Download

  • memory/2632-3-0x000007FEF5900000-0x000007FEF629D000-memory.dmp

    Filesize

    9.6MB

    Download

  • memory/2632-4-0x000000001BB60000-0x000000001BDE6000-memory.dmp

    Filesize

    2.5MB

    Download

  • memory/2632-5-0x000007FEF5900000-0x000007FEF629D000-memory.dmp

    Filesize

    9.6MB

    Download

  • memory/2632-6-0x000007FEF5900000-0x000007FEF629D000-memory.dmp

    Filesize

    9.6MB

    Download

  • memory/2632-7-0x000007FEF5900000-0x000007FEF629D000-memory.dmp

    Filesize

    9.6MB

    Download

  • memory/2632-8-0x000000001D610000-0x000000001D966000-memory.dmp

    Filesize

    3.3MB

    Download

  • memory/2632-9-0x000007FEF5900000-0x000007FEF629D000-memory.dmp

    Filesize

    9.6MB

    Download

  • memory/2632-10-0x000007FEF5900000-0x000007FEF629D000-memory.dmp

    Filesize

    9.6MB

    Download

  • memory/2632-11-0x000007FEF5900000-0x000007FEF629D000-memory.dmp

    Filesize

    9.6MB

    Download

  • memory/2632-12-0x000007FEF5900000-0x000007FEF629D000-memory.dmp

    Filesize

    9.6MB

    Download

  • memory/2632-13-0x000007FEF5BBE000-0x000007FEF5BBF000-memory.dmp

    Filesize

    4KB

    Download

  • memory/2632-14-0x000007FEF5900000-0x000007FEF629D000-memory.dmp

    Filesize

    9.6MB

    Download

  • memory/2632-16-0x000007FEF5900000-0x000007FEF629D000-memory.dmp

    Filesize

    9.6MB

    Download

  • memory/2632-15-0x000007FEF5900000-0x000007FEF629D000-memory.dmp

    Filesize

    9.6MB

    Download

  • memory/2632-17-0x000007FEF5900000-0x000007FEF629D000-memory.dmp

    Filesize

    9.6MB

    Download

  • memory/2632-18-0x000007FEF5900000-0x000007FEF629D000-memory.dmp

    Filesize

    9.6MB

    Download

  • memory/2632-19-0x000007FEF5900000-0x000007FEF629D000-memory.dmp

    Filesize

    9.6MB

    Download

  • memory/2632-41-0x000007FFFFED0000-0x000007FFFFEE0000-memory.dmp

    Filesize

    64KB

    Download

  • memory/2632-39-0x000007FFFFED0000-0x000007FFFFEE0000-memory.dmp

    Filesize

    64KB

    Download

  • memory/2632-45-0x000007FEF5900000-0x000007FEF629D000-memory.dmp

    Filesize

    9.6MB

    Download

  • memory/2632-46-0x000007FEF5900000-0x000007FEF629D000-memory.dmp

    Filesize

    9.6MB

    Download

  • memory/2632-47-0x000007FEF5900000-0x000007FEF629D000-memory.dmp

    Filesize

    9.6MB

    Download

  • memory/2632-48-0x000007FEF5900000-0x000007FEF629D000-memory.dmp

    Filesize

    9.6MB

    Download

  • memory/2632-49-0x000007FEF5900000-0x000007FEF629D000-memory.dmp

    Filesize

    9.6MB

    Download

  • memory/2632-50-0x000007FEF5900000-0x000007FEF629D000-memory.dmp

    Filesize

    9.6MB

    Download