Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20241010-en
  • resource tags

    arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
  • submitted
    13/10/2024, 20:17

General

  • Target

    617b1e301ef31198cfe8b3dd0eee265edf1a5381feadc243905586cb957ce9ba.exe

  • Size

    11.5MB

  • MD5

    d1eb4c578edb1d51f7163afaadfdc815

  • SHA1

    c5503dc8cf192d91a78e8e500e8149bd2b9ddac7

  • SHA256

    617b1e301ef31198cfe8b3dd0eee265edf1a5381feadc243905586cb957ce9ba

  • SHA512

    450e1a87deaddcf032e624faf1f1d7a5d73ceb86721985282364334377bc229529f5d2e3333baf3d53b414c08f1151496d88ee8511221036f2e25d15c144e92d

  • SSDEEP

    196608:yna/wnd78DqBA1HeT39Iigw7vKub75bcjWgbwau5p0W8/LQhoANNxzft3kjLWlFw:u8mq1+TtIiF7vB5IjWqwau5qW80hoA/e

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\617b1e301ef31198cfe8b3dd0eee265edf1a5381feadc243905586cb957ce9ba.exe
    "C:\Users\Admin\AppData\Local\Temp\617b1e301ef31198cfe8b3dd0eee265edf1a5381feadc243905586cb957ce9ba.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2712
    • C:\Users\Admin\AppData\Local\Temp\617b1e301ef31198cfe8b3dd0eee265edf1a5381feadc243905586cb957ce9ba.exe
      "C:\Users\Admin\AppData\Local\Temp\617b1e301ef31198cfe8b3dd0eee265edf1a5381feadc243905586cb957ce9ba.exe"
      2⤵
      • Loads dropped DLL
      PID:1052

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\_MEI27122\python312.dll

    Filesize

    6.7MB

    MD5

    550288a078dffc3430c08da888e70810

    SHA1

    01b1d31f37fb3fd81d893cc5e4a258e976f5884f

    SHA256

    789a42ac160cef98f8925cb347473eeeb4e70f5513242e7faba5139ba06edf2d

    SHA512

    7244432fc3716f7ef27630d4e8fbc8180a2542aa97a01d44dca260ab43966dd8ac98b6023400b0478a4809aace1a128f1f4d6e544f2e591a5b436fd4c8a9d723