Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    13s
  • max time network
    19s
  • platform
    windows7_x64
  • resource
    win7-20241010-en
  • resource tags

    arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
  • submitted
    13/10/2024, 04:43

General

  • Target

    e$EXEFILE.exe

  • Size

    224KB

  • MD5

    a626437b4821f5b37ddc89f479d11a7f

  • SHA1

    56b380a6018d125fe9e23e6cd392779e2409f386

  • SHA256

    5887f21e7c4ce915fb5b469995d4882aa3ca4592b6a1588c96f27e661cfa1129

  • SHA512

    c854a3f6408f60c6e992bb57f0403a5a70c79063f8754289f8893ad9fc35caa3ae3e1cc0eeaeba38cb099e44106258fbfcdaeb211993965a679c33de75af43a5

  • SSDEEP

    3072:TtAEoDjlYOy3Ey1Sh3hAq+zTscdqhZS+QajCjXmsX5YMvOFVxDw/v20YA0bPQNh:JpotYO6E3+zwxBCF4Q

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\e$EXEFILE.exe
    "C:\Users\Admin\AppData\Local\Temp\e$EXEFILE.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2220

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2220-0-0x000007FEF67BE000-0x000007FEF67BF000-memory.dmp

    Filesize

    4KB

  • memory/2220-1-0x000007FEF6500000-0x000007FEF6E9D000-memory.dmp

    Filesize

    9.6MB

  • memory/2220-2-0x000007FEF6500000-0x000007FEF6E9D000-memory.dmp

    Filesize

    9.6MB

  • memory/2220-3-0x000007FEF6500000-0x000007FEF6E9D000-memory.dmp

    Filesize

    9.6MB

  • memory/2220-4-0x000007FEF6500000-0x000007FEF6E9D000-memory.dmp

    Filesize

    9.6MB

  • memory/2220-5-0x000007FEF6500000-0x000007FEF6E9D000-memory.dmp

    Filesize

    9.6MB

  • memory/2220-6-0x000007FEF6500000-0x000007FEF6E9D000-memory.dmp

    Filesize

    9.6MB

  • memory/2220-7-0x000007FEF6500000-0x000007FEF6E9D000-memory.dmp

    Filesize

    9.6MB

  • memory/2220-9-0x000007FEF6500000-0x000007FEF6E9D000-memory.dmp

    Filesize

    9.6MB