Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    15/09/2024, 02:05

General

  • Target

    Sage Bootstrapper.exe

  • Size

    11.5MB

  • MD5

    733761dacdb4368abae431b6b3c294ed

  • SHA1

    c5cb074c31093b7a451579aae143ea80b2686a2d

  • SHA256

    c23749a6afc68eaa38e330b4967ce18cc624cdb6f313799a454c4ad6a0c0d543

  • SHA512

    3ffc8550743c81d51fbca6e9862012fd251aa5fa964356f23c98f1769f1e85e7706ce6c4b0c5e2ef4a3f6d7939882ec6ad908fa73bb2053d2bc6c30e47e60ddf

  • SSDEEP

    196608:8jXU3v+ZJSBoj0NuEP01ABUAw2VU/KuQ0zMV2U1qhaxPZl8:2XU3v+JWoj0I+0tn5vzMV22RP

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Sage Bootstrapper.exe
    "C:\Users\Admin\AppData\Local\Temp\Sage Bootstrapper.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:1700

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1700-0-0x0000000077020000-0x0000000077022000-memory.dmp

    Filesize

    8KB

  • memory/1700-2-0x0000000077020000-0x0000000077022000-memory.dmp

    Filesize

    8KB

  • memory/1700-4-0x0000000077020000-0x0000000077022000-memory.dmp

    Filesize

    8KB

  • memory/1700-5-0x000000013FFE9000-0x00000001406DB000-memory.dmp

    Filesize

    6.9MB

  • memory/1700-6-0x0000000077030000-0x0000000077032000-memory.dmp

    Filesize

    8KB

  • memory/1700-8-0x0000000077030000-0x0000000077032000-memory.dmp

    Filesize

    8KB

  • memory/1700-10-0x0000000077030000-0x0000000077032000-memory.dmp

    Filesize

    8KB

  • memory/1700-11-0x0000000077040000-0x0000000077042000-memory.dmp

    Filesize

    8KB

  • memory/1700-13-0x0000000077040000-0x0000000077042000-memory.dmp

    Filesize

    8KB

  • memory/1700-15-0x0000000077040000-0x0000000077042000-memory.dmp

    Filesize

    8KB

  • memory/1700-16-0x0000000077050000-0x0000000077052000-memory.dmp

    Filesize

    8KB

  • memory/1700-18-0x0000000077050000-0x0000000077052000-memory.dmp

    Filesize

    8KB

  • memory/1700-20-0x0000000077050000-0x0000000077052000-memory.dmp

    Filesize

    8KB

  • memory/1700-21-0x0000000077060000-0x0000000077062000-memory.dmp

    Filesize

    8KB

  • memory/1700-23-0x0000000077060000-0x0000000077062000-memory.dmp

    Filesize

    8KB

  • memory/1700-25-0x0000000077060000-0x0000000077062000-memory.dmp

    Filesize

    8KB

  • memory/1700-26-0x000000013FFC0000-0x0000000141265000-memory.dmp

    Filesize

    18.6MB

  • memory/1700-27-0x0000000077070000-0x0000000077072000-memory.dmp

    Filesize

    8KB

  • memory/1700-64-0x00000000770E0000-0x00000000770E2000-memory.dmp

    Filesize

    8KB

  • memory/1700-62-0x00000000770E0000-0x00000000770E2000-memory.dmp

    Filesize

    8KB

  • memory/1700-61-0x00000000770D0000-0x00000000770D2000-memory.dmp

    Filesize

    8KB

  • memory/1700-59-0x00000000770D0000-0x00000000770D2000-memory.dmp

    Filesize

    8KB

  • memory/1700-57-0x00000000770D0000-0x00000000770D2000-memory.dmp

    Filesize

    8KB

  • memory/1700-56-0x00000000770C0000-0x00000000770C2000-memory.dmp

    Filesize

    8KB

  • memory/1700-54-0x00000000770C0000-0x00000000770C2000-memory.dmp

    Filesize

    8KB

  • memory/1700-52-0x00000000770C0000-0x00000000770C2000-memory.dmp

    Filesize

    8KB

  • memory/1700-51-0x00000000770B0000-0x00000000770B2000-memory.dmp

    Filesize

    8KB

  • memory/1700-49-0x00000000770B0000-0x00000000770B2000-memory.dmp

    Filesize

    8KB

  • memory/1700-47-0x00000000770B0000-0x00000000770B2000-memory.dmp

    Filesize

    8KB

  • memory/1700-46-0x00000000770A0000-0x00000000770A2000-memory.dmp

    Filesize

    8KB

  • memory/1700-44-0x00000000770A0000-0x00000000770A2000-memory.dmp

    Filesize

    8KB

  • memory/1700-42-0x00000000770A0000-0x00000000770A2000-memory.dmp

    Filesize

    8KB

  • memory/1700-41-0x0000000077090000-0x0000000077092000-memory.dmp

    Filesize

    8KB

  • memory/1700-39-0x0000000077090000-0x0000000077092000-memory.dmp

    Filesize

    8KB

  • memory/1700-37-0x0000000077090000-0x0000000077092000-memory.dmp

    Filesize

    8KB

  • memory/1700-36-0x0000000077080000-0x0000000077082000-memory.dmp

    Filesize

    8KB

  • memory/1700-34-0x0000000077080000-0x0000000077082000-memory.dmp

    Filesize

    8KB

  • memory/1700-32-0x0000000077080000-0x0000000077082000-memory.dmp

    Filesize

    8KB

  • memory/1700-31-0x0000000077070000-0x0000000077072000-memory.dmp

    Filesize

    8KB

  • memory/1700-29-0x0000000077070000-0x0000000077072000-memory.dmp

    Filesize

    8KB

  • memory/1700-92-0x000000013FFC0000-0x0000000141265000-memory.dmp

    Filesize

    18.6MB

  • memory/1700-91-0x000000013FFE9000-0x00000001406DB000-memory.dmp

    Filesize

    6.9MB