Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
12s -
max time network
19s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
07/10/2024, 19:33
Behavioral task
behavioral1
Sample
Built.exe
Resource
win7-20240903-en
General
-
Target
Built.exe
-
Size
7.6MB
-
MD5
558d8f6b08261037e237f3b099f67755
-
SHA1
1f028068df666647755231d4cae1d339743dbf11
-
SHA256
ce9f90aecafd2cdd0fca756573f3d3e9b8a4bcbdeccd15a7d98e5139d21d0420
-
SHA512
c899e545fcc3db015c66cfbeb67efddaf0b0dc1b596a6edb2a1b53ff86967a8dd25fd51811406794b672d4c0f46c929288411fad3300c16c1b95dd5c3e1ffc03
-
SSDEEP
196608:Nl6HYvwfI9jUCzi4H1qSiXLGVi7DMgpZ3Q0VMwICEc/jN:DKIHziK1piXLGVE4Ue0VJB
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 2888 Built.exe -
resource yara_rule behavioral1/files/0x0005000000019044-21.dat upx behavioral1/memory/2888-23-0x000007FEF6290000-0x000007FEF68F3000-memory.dmp upx -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 2248 wrote to memory of 2888 2248 Built.exe 29 PID 2248 wrote to memory of 2888 2248 Built.exe 29 PID 2248 wrote to memory of 2888 2248 Built.exe 29
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.8MB
MD56ef5d2f77064df6f2f47af7ee4d44f0f
SHA10003946454b107874aa31839d41edcda1c77b0af
SHA256ab7c640f044d2eb7f4f0a4dfe5e719dfd9e5fcd769943233f5cece436870e367
SHA5121662cc02635d63b8114b41d11ec30a2af4b0b60209196aac937c2a608588fee47c6e93163ea6bf958246c32759ac5c82a712ea3d690e796e2070ac0ff9104266