Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
116s -
max time network
17s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
05/10/2024, 19:37
Static task
static1
Behavioral task
behavioral1
Sample
62f553dea451caab8d9b41f2927b908f5c8bf94684462257cbab84658d66a77eN.exe
Resource
win7-20240903-en
General
-
Target
62f553dea451caab8d9b41f2927b908f5c8bf94684462257cbab84658d66a77eN.exe
-
Size
66KB
-
MD5
6d73f0391fb170303fd35b01802f3650
-
SHA1
f4c89cbe6c07877b9fd4f2ac897111ac9e5c12c6
-
SHA256
62f553dea451caab8d9b41f2927b908f5c8bf94684462257cbab84658d66a77e
-
SHA512
95a8d2c1ab32f4a33632f2085bb4d5f71a1e8b881fc52f54d14ada83514245da0bb233c31eb5b3c103fc7b098ef4f51c0b53ee132209fdf45e3316a68b213ad7
-
SSDEEP
768:ErzwvKnNCzPFU7afR9g3/jbP+WbUk87ZD7k14/dFLBxHbMSJ:EzNkfRY/o7k12dFLBxHbMSJ
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
pid Process 1276 rmass.exe -
Loads dropped DLL 1 IoCs
pid Process 596 62f553dea451caab8d9b41f2927b908f5c8bf94684462257cbab84658d66a77eN.exe -
Drops file in System32 directory 2 IoCs
description ioc Process File created C:\Windows\SysWOW64\rmass.exe 62f553dea451caab8d9b41f2927b908f5c8bf94684462257cbab84658d66a77eN.exe File opened for modification C:\Windows\SysWOW64\rmass.exe 62f553dea451caab8d9b41f2927b908f5c8bf94684462257cbab84658d66a77eN.exe -
resource yara_rule behavioral1/files/0x000b00000001227f-1.dat upx behavioral1/memory/1276-5-0x0000000000400000-0x0000000000412000-memory.dmp upx
Processes
-
C:\Users\Admin\AppData\Local\Temp\62f553dea451caab8d9b41f2927b908f5c8bf94684462257cbab84658d66a77eN.exe"C:\Users\Admin\AppData\Local\Temp\62f553dea451caab8d9b41f2927b908f5c8bf94684462257cbab84658d66a77eN.exe"1⤵
- Loads dropped DLL
- Drops file in System32 directory
PID:596 -
C:\Windows\SysWOW64\rmass.exe"C:\Windows\SysWOW64\rmass.exe"2⤵
- Executes dropped EXE
PID:1276
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
63KB
MD5890044d497300bd71b1410073c95c099
SHA1e338a66cefac7dda55c76bf5af0195607ba1c1fd
SHA256f5efbd8297de270ccfe2a26557ff341102cd9b703ab408ec215f83175f83116d
SHA5122a2be0db60307a45883bbbee0c5ee5dddf18fa9b1c4fb6c3d6802693ac0dc3c541f71f154026000ba208bbbbbdbd8fd2bee05c4217856db47b9216a46844c7f4