Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
29/09/2024, 23:26
Behavioral task
behavioral1
Sample
ElectronV3.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ElectronV3.exe
Resource
win10v2004-20240802-en
General
-
Target
ElectronV3.exe
-
Size
37.8MB
-
MD5
3b3a67fbdef30c60edace57f0879f62f
-
SHA1
b80ec72cd264e01798ba523fbb3cd76655663e21
-
SHA256
c277b4a4e4e38ec0667f01e9486eeb516caf589e24b7c573852dbc555c162666
-
SHA512
b1d4dba1f15ca87a1140e8ce7a21e791adbea46d525de549c46aa9128d12605e7eee1b1d4dbe5971604a5f0a2bca4a181579ecc54abcb080006f60bcd1ffe976
-
SSDEEP
786432:vpE/xQlr4/n82Vf0ZpGRexsQGj22uJBxffo8CXIs5qiI7/7K4rv3Fqb1:hc2lr4/n9gpGash48XIeG7/GUqb1
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 2816 ElectronV3.exe -
resource yara_rule behavioral1/files/0x000500000001963a-47.dat upx behavioral1/memory/2816-49-0x000007FEF6500000-0x000007FEF6965000-memory.dmp upx -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 1160 wrote to memory of 2816 1160 ElectronV3.exe 31 PID 1160 wrote to memory of 2816 1160 ElectronV3.exe 31 PID 1160 wrote to memory of 2816 1160 ElectronV3.exe 31
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.4MB
MD590d5b8ba675bbb23f01048712813c746
SHA1f2906160f9fc2fa719fea7d37e145156742ea8a7
SHA2563a7d497d779ff13082835834a1512b0c11185dd499ab86be830858e7f8aaeb3e
SHA512872c2bf56c3fe180d9b4fb835a92e1dc188822e9d9183aab34b305408bb82fba1ead04711e8ad2bef1534e86cd49f2445d728851206d7899c1a7a83e5a62058e