Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    93s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    03/10/2024, 21:03

General

  • Target

    7cbaad3ecb2cb27ac92cd880f7a89b8b5cbaa5c4f6e73ef1b2e221114270fc58N.exe

  • Size

    83KB

  • MD5

    c970930b0516d5aad3ba047bd5639480

  • SHA1

    55afa94ab238be896178bc63df1f1064ac252eb2

  • SHA256

    7cbaad3ecb2cb27ac92cd880f7a89b8b5cbaa5c4f6e73ef1b2e221114270fc58

  • SHA512

    ce2816c4544d00d12ad0dab358ea09471d09e9e3f6f39034376dee2bddb61a9680f8ed079c045f4c3384d135e2e643392238da9f1e41af5bff1265b7e77489d4

  • SSDEEP

    1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF++K:LJ0TAz6Mte4A+aaZx8EnCGVu+

Score
5/10

Malware Config

Signatures

  • UPX packed file 6 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\7cbaad3ecb2cb27ac92cd880f7a89b8b5cbaa5c4f6e73ef1b2e221114270fc58N.exe
    "C:\Users\Admin\AppData\Local\Temp\7cbaad3ecb2cb27ac92cd880f7a89b8b5cbaa5c4f6e73ef1b2e221114270fc58N.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2552

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\rifaien2-ydm7psBVq16YlK2f.exe

    Filesize

    83KB

    MD5

    a8c36c167f4b1925de373157a377674f

    SHA1

    c1b273e5194756d86c9058f39464e3d73bb0d7de

    SHA256

    fdebb3c7814367056b47b1131b9f9673baa9a281881d10b647e6bf669c31b4e4

    SHA512

    30ed9052b9d2285414f6fd53e85f63ce0c3cf4989772db8a7af19a39b380827483a18ddbf4612bd084a62eec28360699f4ca7d9c4edd03e02446548d2671e80d

  • memory/2552-0-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/2552-1-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/2552-7-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/2552-14-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/2552-22-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB