Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

1

obraz_2024...91.png

windows7-x64

3

obraz_2024...91.png

windows10-2004-x64

3

Resubmissions

12/09/2024, 17:31

240912-v3wn7swajq 3

12/09/2024, 17:29

240912-v2w9cawakf 8

12/09/2024, 17:28

240912-v2g5eswakb 3

12/09/2024, 17:11

240912-vqej6avfjg 8

12/09/2024, 17:09

240912-vpczyaveqb 3

12/09/2024, 17:08

240912-vnjq4avenc 3

Analysis

  • max time kernel
    0s
  • max time network
    0s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    12/09/2024, 17:28

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    obraz_2024-09-12_190801491.png

  • Size

    626KB

  • MD5

    d395a4791b4ef58425cf268f12c6a53e

  • SHA1

    6e56ad53f72a10fea5ec528d18c485e9571e1798

  • SHA256

    3b1f9ee1e664702e254e6d05e00e489676ab196a56ff3a6904926e7b9dddd0c3

  • SHA512

    5c8bc703790cf75d3c37539c6f2df7b95ef4fdfe717218d663f51f5a919a68c31ab25f09a43f230ab23559b7ca711b065727a89e8092748f2d26f9970236aed4

  • SSDEEP

    12288:ytJJ2MRpKe1n5DEJVC5qiX8lypQ0hFCnjg7hX/mim/w:ydn5wzCgiXo4pMP4

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious use of FindShellTrayWindow 1 IoCs

Processes

  • C:\Windows\System32\rundll32.exe
    C:\Windows\System32\rundll32.exe "C:\Program Files\Windows Photo Viewer\PhotoViewer.dll", ImageView_Fullscreen C:\Users\Admin\AppData\Local\Temp\obraz_2024-09-12_190801491.png
    1⤵
    • Suspicious use of FindShellTrayWindow
    PID:2172

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2172-0-0x0000000000310000-0x0000000000311000-memory.dmp

    Filesize

    4KB

    Download