Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
2s -
max time network
2s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
29/01/2025, 18:05
Behavioral task
behavioral1
Sample
main.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
main.exe
Resource
win10v2004-20241007-en
General
-
Target
main.exe
-
Size
15.7MB
-
MD5
9550228d8852d3b2b52cd6a3eb0d754f
-
SHA1
f85d13237547c264f9ace90773a22efb61829b48
-
SHA256
610514f7fef1195d4b142a024e0626bfa7ebb47756a5b357e9fb9e37a2d2d2f9
-
SHA512
a3235230eba1fa87d216c3b55ab8f06653d38ba4fbaee1046a0afeb0cc0a77a28979dacf6d91291adde259d957841c7e45f219844393f432e680084b2d31e443
-
SSDEEP
196608:Z1ih8FEmN+6Qj+IeB0sKYu/PaQhKDnO8NpH5RttG7R9kHgiNpEMvqvEmbFzPG4V7:/LFXlr1Q8DOEfrGFUgeYvEuTPOiq
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 2636 main.exe -
resource yara_rule behavioral1/files/0x0005000000019624-67.dat upx behavioral1/memory/2636-69-0x000007FEF5E00000-0x000007FEF626E000-memory.dmp upx -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 2468 wrote to memory of 2636 2468 main.exe 30 PID 2468 wrote to memory of 2636 2468 main.exe 30 PID 2468 wrote to memory of 2636 2468 main.exe 30
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.4MB
MD569d4f13fbaeee9b551c2d9a4a94d4458
SHA169540d8dfc0ee299a7ff6585018c7db0662aa629
SHA256801317463bd116e603878c7c106093ba7db2bece11e691793e93065223fc7046
SHA5128e632f141daf44bc470f8ee677c6f0fdcbcacbfce1472d928576bf7b9f91d6b76639d18e386d5e1c97e538a8fe19dd2d22ea47ae1acf138a0925e3c6dd156378