Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    18/10/2024, 08:00

General

  • Target

    47199d66bf69ec121992d4f83c3bc130753c487cffa6a0fd24957feba20f6672N.exe

  • Size

    83KB

  • MD5

    f03274bbcb5ee952b0cd2c43d0de5000

  • SHA1

    bf06c6e5c8483e3b0d3cdfebe16569ea300d43e9

  • SHA256

    47199d66bf69ec121992d4f83c3bc130753c487cffa6a0fd24957feba20f6672

  • SHA512

    6a86450f587b080d0470ac1f114414cd669d04c5c61ea09671e7f891820eca4cfce2ec0221b8377cc0a1d7196fdb57ce51d5be1d2a7a7f2d35a6bf116a70bccf

  • SSDEEP

    1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+zK:LJ0TAz6Mte4A+aaZx8EnCGVuz

Score
5/10

Malware Config

Signatures

  • UPX packed file 6 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\47199d66bf69ec121992d4f83c3bc130753c487cffa6a0fd24957feba20f6672N.exe
    "C:\Users\Admin\AppData\Local\Temp\47199d66bf69ec121992d4f83c3bc130753c487cffa6a0fd24957feba20f6672N.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2480

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\rifaien2-UYOJm93MlazWv2XV.exe

    Filesize

    83KB

    MD5

    7d6f3516c7c99becba6e3c3057d4f33e

    SHA1

    4ac515985c658f35be9a5cdb24a070e5ee05d8d8

    SHA256

    c1c262fdbdea1f74a87512e7bd0b86135c0e227b1cd328f78a9a9cc35203d967

    SHA512

    3dee5a26dc74cb05c7a42d476aef4380264105d5b9f4e731eb1fbaa72b9398ba2258955af4695823c0efb05da1666fb20656a07415f71c02a3e68cc413584b3e

  • memory/2480-0-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/2480-1-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/2480-5-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/2480-12-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/2480-22-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB