Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system -
submitted
18/12/2024, 23:27
Behavioral task
behavioral1
Sample
Built.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
Built.exe
Resource
win10v2004-20241007-en
General
-
Target
Built.exe
-
Size
7.5MB
-
MD5
32de27aa1388746d35efde69422ef583
-
SHA1
90a37c188626580fe58fd67cfa5a5089aa3fa8fa
-
SHA256
2d777e9ec797cf580abc67e23fc40778d1794c367c1faef4a4e7d90872111a3f
-
SHA512
ce1c966e95e6c64dd58208ba9ff4cf6ff212c38aa25ad6542b293feb6a5c6215553f07999a620a2c4e5ba333e6eb726c6b567037d024b27f253970566b024e23
-
SSDEEP
196608:R3hhOZ5urErvI9pWjg/Qc+4o673pNrabenyzWtPMYnNcsg:5E5urEUWjZZ4dDLIeyzWtPTNzg
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 2372 Built.exe -
resource yara_rule behavioral1/files/0x00050000000195c6-21.dat upx behavioral1/memory/2372-23-0x000007FEF60F0000-0x000007FEF67B5000-memory.dmp upx -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 2200 wrote to memory of 2372 2200 Built.exe 30 PID 2200 wrote to memory of 2372 2200 Built.exe 30 PID 2200 wrote to memory of 2372 2200 Built.exe 30
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.7MB
MD5eb02b8268d6ea28db0ea71bfe24b15d6
SHA186f723fcc4583d7d2bd59ca2749d4b3952cd65a5
SHA25680222651a93099a906be55044024d32e93b841c83554359d6e605d50d11e2e70
SHA512693bbc3c896ad3c6044c832597f946c778e6c6192def3d662803e330209ec1c68d8d33bd82978279ae66b264a892a366183dcef9a3a777e0a6ee450a928268e2