Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    91s
  • max time network
    92s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    02/10/2024, 09:17

General

  • Target

    ed2dd62e02412f7f9425e658bbe8bedc06c0239b727cbf691b7b01b15635334eN.exe

  • Size

    236KB

  • MD5

    9b80984d1a233a8b7d40649787f699d0

  • SHA1

    377f7c8d70178dc4cc7923723c1e121d07c20cd0

  • SHA256

    ed2dd62e02412f7f9425e658bbe8bedc06c0239b727cbf691b7b01b15635334e

  • SHA512

    46bc275cb34da1dc5e5f281278ab24f65630eed073bf19ed941dd23ba502e1c96c1e10a1d3bf151970aae413756f8dbe3873786cb03fccdcf03d5ce0203c6313

  • SSDEEP

    3072:NJ0Bs3o8A4M3riN6MhGkgS3PL6pb9t16n5OkhBOPC/A/FnncroP9:3wDeM7iNEkgiOb31k1EC+J/F

Score
5/10

Malware Config

Signatures

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\ed2dd62e02412f7f9425e658bbe8bedc06c0239b727cbf691b7b01b15635334eN.exe
    "C:\Users\Admin\AppData\Local\Temp\ed2dd62e02412f7f9425e658bbe8bedc06c0239b727cbf691b7b01b15635334eN.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2408

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\rifaien2-65UdvBfGpWOp7h8J.exe

    Filesize

    236KB

    MD5

    6e8061c112d701ba45fa15e338db3131

    SHA1

    802ab613f502e29308fe618e445f96b383823d47

    SHA256

    040ed511e309f69852c6ca266c3517fadc522e8e41933f68cecc8f78e07f6bac

    SHA512

    1e99735d688e475880ddbe407e402904c4f4ac560f1dd6cf4bc38a8162af51f0585c5c71e6cb7760a4b951b6c62c1b3e22e74241d6f88a4ecf5fe1c2c73cc171

  • memory/2408-0-0x0000000000400000-0x000000000043B000-memory.dmp

    Filesize

    236KB

  • memory/2408-1-0x0000000000400000-0x000000000043B000-memory.dmp

    Filesize

    236KB