Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Resubmissions
17/01/2025, 23:13
250117-27m17awqfr 1030/10/2024, 18:56
241030-xlpwfayjes 1030/10/2024, 18:54
241030-xkh2hazbkd 1030/10/2024, 12:18
241030-pgs4astcnr 1030/10/2024, 00:51
241030-a7ldtavjar 10Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
17/01/2025, 23:13
Behavioral task
behavioral1
Sample
main.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
main.exe
Resource
win10v2004-20241007-en
General
-
Target
main.exe
-
Size
17.9MB
-
MD5
730fc86da627a409e79927e3d7a4c134
-
SHA1
b6d604d54f768ffa2ee23f392f00923f577477e7
-
SHA256
d3976032b4f070c0869f16149179df984ef6c479d1b510062ced4cda55bd17b8
-
SHA512
b5f7696b65ee1e4b6f0baf7b01080b2d08afcdea916f035c7abe68774cc3278989bb0375a95e8c65180738fed4c0d8d7f923b8a5a459999d169202aaa1b88a50
-
SSDEEP
393216:oqPnLFXlrzQMDOETgsvfGlgQnZvEnY9dDunE3q:ZPLFXNzQREorOnK1uh
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 672 main.exe -
resource yara_rule behavioral1/files/0x000500000001a4e1-112.dat upx behavioral1/memory/672-114-0x000007FEF6370000-0x000007FEF67DE000-memory.dmp upx -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 1728 wrote to memory of 672 1728 main.exe 30 PID 1728 wrote to memory of 672 1728 main.exe 30 PID 1728 wrote to memory of 672 1728 main.exe 30
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.4MB
MD569d4f13fbaeee9b551c2d9a4a94d4458
SHA169540d8dfc0ee299a7ff6585018c7db0662aa629
SHA256801317463bd116e603878c7c106093ba7db2bece11e691793e93065223fc7046
SHA5128e632f141daf44bc470f8ee677c6f0fdcbcacbfce1472d928576bf7b9f91d6b76639d18e386d5e1c97e538a8fe19dd2d22ea47ae1acf138a0925e3c6dd156378