Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20241023-en -
resource tags
arch:x64arch:x86image:win7-20241023-enlocale:en-usos:windows7-x64system -
submitted
30/01/2025, 20:38
Behavioral task
behavioral1
Sample
Built.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
Built.exe
Resource
win10v2004-20250129-en
General
-
Target
Built.exe
-
Size
7.6MB
-
MD5
eb146295a12c6818d06c6cca113d1966
-
SHA1
46a259ab30dde8731abfa86bba240addc0615a17
-
SHA256
7364638249a25718404bee072c8418cc7d4a5e84220fbf38becd910f65f48775
-
SHA512
448f673a07d41a8c8d3216ac83873498426e3c420fbcf1c3469a7199f1bb6d5fb4e2240ce4ef549ad7267a9d26be7bad7a0eae1925781b9e06fa37f6de6553bb
-
SSDEEP
196608:ueD+kdbwfI9jUCBB7m+mKOY7rXrZusooDmhfvsbnTNWn:J5CIHL7HmBYXrYoaUNI
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 2012 Built.exe -
resource yara_rule behavioral1/files/0x0005000000019509-21.dat upx -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 1484 wrote to memory of 2012 1484 Built.exe 31 PID 1484 wrote to memory of 2012 1484 Built.exe 31 PID 1484 wrote to memory of 2012 1484 Built.exe 31
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.8MB
MD59a3d3ae5745a79d276b05a85aea02549
SHA1a5e60cac2ca606df4f7646d052a9c0ea813e7636
SHA25609693bab682495b01de8a24c435ca5900e11d2d0f4f0807dae278b3a94770889
SHA51246840b820ee3c0fa511596124eb364da993ec7ae1670843a15afd40ac63f2c61846434be84d191bd53f7f5f4e17fad549795822bb2b9c792ac22a1c26e5adf69