Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    110s
  • max time network
    92s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    19/09/2024, 17:50

General

  • Target

    3dc9f5aa467fe9ef579b4c7e9c73eaf76d8be7ac3b865c59fc96d780931bf539N.exe

  • Size

    83KB

  • MD5

    76b3c5f904ebbd98078fa10cf7163600

  • SHA1

    27051fff904a25478ae98bb3e8f45da3747d54af

  • SHA256

    3dc9f5aa467fe9ef579b4c7e9c73eaf76d8be7ac3b865c59fc96d780931bf539

  • SHA512

    0e473eb983062ec72cc16291f275f15510b9d5b4a56ea32cee7e7ed2d7c48f31c0a954f37e4fe02935598ec4a38ab984ec3d5ad144ec7fd52cc2cdc259a71f1b

  • SSDEEP

    1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+4K:LJ0TAz6Mte4A+aaZx8EnCGVu4

Score
7/10

Malware Config

Signatures

  • UPX packed file 6 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\3dc9f5aa467fe9ef579b4c7e9c73eaf76d8be7ac3b865c59fc96d780931bf539N.exe
    "C:\Users\Admin\AppData\Local\Temp\3dc9f5aa467fe9ef579b4c7e9c73eaf76d8be7ac3b865c59fc96d780931bf539N.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:3040

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\rifaien2-zzYV8mzKeaz0oDR5.exe

    Filesize

    83KB

    MD5

    a98b06376574a827d725cd6b3ac38edc

    SHA1

    0ce12bfb7b9771bf8714d04985d0812dfa492d08

    SHA256

    f0d1dc0b8e392960dae947aaf715bbfd3a2814fa4845c1db576fb310bf01b7bd

    SHA512

    4198ed3d48659adafef090b43bf87a648aeb8b9915be25ac1f908f76d24ac1a011a7bddef70b5da321f1ef21312549163e00e37089a508a2c5672f8f7f02b3ee

  • memory/3040-0-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/3040-1-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/3040-5-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/3040-15-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/3040-22-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB