Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    110s
  • max time network
    97s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    17/10/2024, 20:55

General

  • Target

    79dad52da4f31769019669e4d7c3dd691d3912c65387f051e50c555d32a3cc5dN.exe

  • Size

    83KB

  • MD5

    1602f9df23042fa5233f3f9ab2f66be0

  • SHA1

    eb3870d94ec679749942328bb96e889f08fde164

  • SHA256

    79dad52da4f31769019669e4d7c3dd691d3912c65387f051e50c555d32a3cc5d

  • SHA512

    7f9b218761203772e3236b48c6307af304798743ba31f422907029b850763a330a3ddb293a436bd95c98fcd6d0ea702814ab2d044bff439d4412c5fdf77f1645

  • SSDEEP

    1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+JK:LJ0TAz6Mte4A+aaZx8EnCGVuJ

Score
5/10

Malware Config

Signatures

  • UPX packed file 6 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\79dad52da4f31769019669e4d7c3dd691d3912c65387f051e50c555d32a3cc5dN.exe
    "C:\Users\Admin\AppData\Local\Temp\79dad52da4f31769019669e4d7c3dd691d3912c65387f051e50c555d32a3cc5dN.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:1800

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\rifaien2-CxAy4IV6X2Z0P20p.exe

    Filesize

    83KB

    MD5

    001a09412ef1be6c6cee20b53b1b1810

    SHA1

    403d922fe09a2e1288d2c33fcc07628683519d5c

    SHA256

    abda10a2b7a63bccd3ec7b908a63501a0d889082bc65df29f656340bd900544c

    SHA512

    466f3fd39a0b70736aec5f8e56ae06223cd54625d5b8fb2810c918d6192140b71e71986f551476d39dd24c774102df2c43e309c44527f4c4253c18e88037f213

  • memory/1800-0-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/1800-1-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/1800-6-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/1800-12-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/1800-22-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB