Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    111s
  • max time network
    99s
  • platform
    windows7_x64
  • resource
    win7-20241010-en
  • resource tags

    arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
  • submitted
    17/10/2024, 23:16

General

  • Target

    f9bd3134fa5520a6e1f56387106c3f4d2d01b680053cba2bdef0a1c47a3ba444N.exe

  • Size

    83KB

  • MD5

    3a7870d38e8c6e9602cb9826c7eafea0

  • SHA1

    ce3acfc930f5ecc937130414a92c0e1f50a8f48e

  • SHA256

    f9bd3134fa5520a6e1f56387106c3f4d2d01b680053cba2bdef0a1c47a3ba444

  • SHA512

    e8e0e31ca0a8075c563dc74fa1d1556a6f6be5167e30fd1a1613d39f34fc88f3527624b8b4666758ed5654328bf22002dfd049da5247f42eb5462a0179da2933

  • SSDEEP

    1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+oK:LJ0TAz6Mte4A+aaZx8EnCGVuo

Score
5/10

Malware Config

Signatures

  • UPX packed file 6 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\f9bd3134fa5520a6e1f56387106c3f4d2d01b680053cba2bdef0a1c47a3ba444N.exe
    "C:\Users\Admin\AppData\Local\Temp\f9bd3134fa5520a6e1f56387106c3f4d2d01b680053cba2bdef0a1c47a3ba444N.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2904

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\rifaien2-KcplMRDb8cQvET4n.exe

    Filesize

    83KB

    MD5

    0059f0726f6c9bc6a061f10e385b404c

    SHA1

    3a16edbb876f9f2bf443b8385f7136656136451e

    SHA256

    87f631d73a4443182f447c5d0586fda876103f0970d67b40efec41c1b0036d1c

    SHA512

    d65acfa53f29df2d7c1c42764e10bf20cbb7b9f389d4cd7d10840547f3698d2430bcfbada6618993c9eef04199c184e184945b932b76505306f0ff07a697bafb

  • memory/2904-0-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/2904-1-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/2904-5-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/2904-15-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/2904-22-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB