Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    28/09/2024, 21:25 UTC

General

  • Target

    $PLUGINSDIR/splash.bmp

  • Size

    600KB

  • MD5

    94f52dc67c016167d6eaf6e0c3cf0942

  • SHA1

    e03a061117872d458d106ff67a70df5b4b236e08

  • SHA256

    d91b10d9516f3153cfad2e00b9975a835b1538be1dc0ec0e2821a7f3755322b0

  • SHA512

    f2439352039abd0894e1addb23dd3033434300804c5c2d0139c1c74e8f02832033a54a0792a1bf2fabfbc220e5645bc4e4f77b9831edcf7cdecd162e7a5b6273

  • SSDEEP

    6144:kcoYVYZtkKsq1ReH8z1UMKFAeH4kTBERaZN:kcoYVYZtPReczGM8qRaZN

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious use of FindShellTrayWindow 1 IoCs

Processes

  • C:\Windows\System32\rundll32.exe
    C:\Windows\System32\rundll32.exe "C:\Program Files\Windows Photo Viewer\PhotoViewer.dll", ImageView_Fullscreen C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\splash.bmp
    1⤵
    • Suspicious use of FindShellTrayWindow
    PID:2960

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2960-0-0x0000000000220000-0x0000000000221000-memory.dmp

    Filesize

    4KB

  • memory/2960-1-0x0000000000220000-0x0000000000221000-memory.dmp

    Filesize

    4KB

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.