Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
16/11/2024, 01:25
Behavioral task
behavioral1
Sample
um.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
um.exe
Resource
win10v2004-20241007-en
General
-
Target
um.exe
-
Size
7.6MB
-
MD5
aa38c65c8b21f806c91623da185edf8a
-
SHA1
0a69211d1110d3919e4168ed1add15a22e8bc137
-
SHA256
6907f2970fe72131b4f9331d8381fca76e102745b8419a8a22d1acba90be5b46
-
SHA512
1ef7855bc7784a74bb9c98b00b14e246e6d5c8ef05f5622641ba1b992d31ff61b49ece5cd609754da6b86c89b43cc7f562abf51d766ea665375e0056f0dc5a87
-
SSDEEP
196608:vFHY7wfI9jUCzi4H1qSiXLGVi7DMgpZ3Q0VMwICEc/jp:1IHziK1piXLGVE4Ue0VJl
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 2788 um.exe -
resource yara_rule behavioral1/files/0x000500000001932a-21.dat upx -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 2748 wrote to memory of 2788 2748 um.exe 30 PID 2748 wrote to memory of 2788 2748 um.exe 30 PID 2748 wrote to memory of 2788 2748 um.exe 30
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.8MB
MD56ef5d2f77064df6f2f47af7ee4d44f0f
SHA10003946454b107874aa31839d41edcda1c77b0af
SHA256ab7c640f044d2eb7f4f0a4dfe5e719dfd9e5fcd769943233f5cece436870e367
SHA5121662cc02635d63b8114b41d11ec30a2af4b0b60209196aac937c2a608588fee47c6e93163ea6bf958246c32759ac5c82a712ea3d690e796e2070ac0ff9104266