Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
04/10/2024, 14:54
General
-
Target
PS_KPT7/KPT7/KPT Channel Surfing_c.dll
-
Size
56KB
-
MD5
3cefbdda9864dff040210ea68dcc69fb
-
SHA1
eba5af8b48064a4fb5b0f64bc95968f4a16ff63b
-
SHA256
8222aac9879222679f264e32f899271f7eca6347253f638347610ca4f406a673
-
SHA512
be2de8022d9d12c754694f18ab6c4ac9f153607209467a5159237bf6ce34aca4c85ab62f0056136e82fdaeb77dc6b306ab418e3104f9510cad2a6dd68e7dac0d
-
SSDEEP
1536:bLMjCq6JMIUUYc9ZK9XxDjsCdrLcvh+V7cNAj1r3OTzOpi7O:06JMII0TTzOk7
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of WriteProcessMemory 7 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe "C:\Users\Admin\AppData\Local\Temp\PS_KPT7\KPT7\KPT Channel Surfing_c.dll",#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe "C:\Users\Admin\AppData\Local\Temp\PS_KPT7\KPT7\KPT Channel Surfing_c.dll",#12⤵
- System Location Discovery: System Language Discovery
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
712KB
-
Filesize
328KB
-
Filesize
332KB
-
Filesize
104KB
-
Filesize
48KB
-
Filesize
168KB
-
Filesize
44KB