Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
13s -
max time network
19s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
07/09/2024, 14:30
General
-
Target
a0ca3aa7f5ac094ef1f1ff802f74b8f6c3fd94baaffe57b28d37d64d6b31e3f3.exe
-
Size
10.3MB
-
MD5
256f8f88a635535482f20729bbc50dcd
-
SHA1
93eef38c537aeba5ec7fe127803e1bc40da08e8f
-
SHA256
a0ca3aa7f5ac094ef1f1ff802f74b8f6c3fd94baaffe57b28d37d64d6b31e3f3
-
SHA512
1fda8eca7fa84772a7077284c33f60df372a4e4567039b1ddea050f0a004a0e31806f066eb0822df31af8b1e971cb09f30cfbd1484f3593dcdc458fdf4eb9a7c
-
SSDEEP
196608:tZb9vjKGBapC6xaMXKY9k1Ma23n11AtF+eDYGS/XgyBSL0nLi+BH7dwYc9BDal9:b9LKIapC6xB3c9sz
Malware Config
Signatures
-
Loads dropped DLL 2 IoCs
-
UPX packed file 25 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\a0ca3aa7f5ac094ef1f1ff802f74b8f6c3fd94baaffe57b28d37d64d6b31e3f3.exe"C:\Users\Admin\AppData\Local\Temp\a0ca3aa7f5ac094ef1f1ff802f74b8f6c3fd94baaffe57b28d37d64d6b31e3f3.exe"1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8.4MB
MD58b6c94bbdbfb213e94a5dcb4fac28ce3
SHA1b56102ca4f03556f387f8b30e2b404efabe0cb65
SHA256982a177924762f270b36fe34c7d6847392b48ae53151dc2011078dceef487a53
SHA5129d6d63b5d8cf7a978d7e91126d7a343c2f7acd00022da9d692f63e50835fdd84a59a93328564f10622f2b1f6adfd7febdd98b8ddb294d0754ed45cc9c165d25a
-
Filesize
2.5MB
MD5298f5812023bab65ee23d13ee9489a6e
SHA171e9d7f205e5e7af6907c539c77a3aeea971692f
SHA256fe100d35b034c15ae3b74379f4eedd321c8e4b84fe666b54ee924ca2a8bdca6e
SHA512217258fb7728f61199f913fb98c894077c12a124e1596d1c6c7cfc065d4d2a6e1e03ad950c3321e2a8dcd997fb5c9524f98530db4bcb39f9914ecb5ff0e22dbd
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB