Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    25/09/2024, 18:30

General

  • Target

    5a103776d7af498952edb046ec81c424fdc8b3389b3ffef1e89a964c32cf170eN.exe

  • Size

    83KB

  • MD5

    444ca0266b184a6cd3ec93dcf1a29000

  • SHA1

    a892c79204c250d1e2a49b554738e60c334ac807

  • SHA256

    5a103776d7af498952edb046ec81c424fdc8b3389b3ffef1e89a964c32cf170e

  • SHA512

    7ef6853ae669409b51f3073808587cf33f07801ab772a81c23cd92779dde9ca776068de716b0b1441e685ff84ad433294b81bcc5a92f1802400309f8676dbee7

  • SSDEEP

    1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+bK:LJ0TAz6Mte4A+aaZx8EnCGVub

Score
5/10

Malware Config

Signatures

  • UPX packed file 6 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\5a103776d7af498952edb046ec81c424fdc8b3389b3ffef1e89a964c32cf170eN.exe
    "C:\Users\Admin\AppData\Local\Temp\5a103776d7af498952edb046ec81c424fdc8b3389b3ffef1e89a964c32cf170eN.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2292

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\rifaien2-9TKYAuFDsExIxhyt.exe

    Filesize

    83KB

    MD5

    2c5c1efe18dcb2797d36ac1e23cb6b73

    SHA1

    e496726486044049acf63f1494ae96b6a87674a1

    SHA256

    6b0b78a8c540b3b901e947bb95aef4ba3ad6da1f0db5847a679d8a1bb8ca9cb7

    SHA512

    3b96f44cd763da9ecd0d6f39be2cd28da380adef8c2dc9593363f0ed8baf97005f0c5ff26a245dd83a540b00db98b210c5112d1fb411262da7524bf8ce3abc08

  • memory/2292-0-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/2292-2-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/2292-6-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/2292-13-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/2292-23-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB