Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

5238cb4f38...45.exe

windows7_x64

10

5238cb4f38...45.exe

windows10-2004_x64

10

Analysis

  • max time kernel
    4294183s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20220223-en
  • submitted
    23/02/2022, 15:17

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    5238cb4f38abf64151df3b85f74084abfc98f54cd6244198ce9d86de579a2445.exe

  • Size

    346KB

  • MD5

    4083b0e75f65d672e4ea31a97d5705ab

  • SHA1

    d83783afc8d3c9579f02d2f0fab6f1ec40e117dd

  • SHA256

    5238cb4f38abf64151df3b85f74084abfc98f54cd6244198ce9d86de579a2445

  • SHA512

    b4236b1fa73aae8c319d9a4ff7066ce171d00a975133ec8e1e01893edb3c8143d05cef2997cee5fd95cff03ad7bf4168c473f9ebea16c39dc53eeeb85ff44716

Score
10/10
gozi_rm3bankertrojan

Malware Config

Extracted

Family

gozi_rm3

rsa_pubkey.base64

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\5238cb4f38abf64151df3b85f74084abfc98f54cd6244198ce9d86de579a2445.exe
    "C:\Users\Admin\AppData\Local\Temp\5238cb4f38abf64151df3b85f74084abfc98f54cd6244198ce9d86de579a2445.exe"
    1⤵
      PID:1988

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1988-54-0x000000000032B000-0x000000000033C000-memory.dmp

      Filesize

      68KB

      Download

    • memory/1988-55-0x00000000002C0000-0x00000000002CA000-memory.dmp

      Filesize

      40KB

      Download

    • memory/1988-58-0x000000000032B000-0x000000000033C000-memory.dmp

      Filesize

      68KB

      Download

    • memory/1988-59-0x00000000002A0000-0x00000000002A7000-memory.dmp

      Filesize

      28KB

      Download

    • memory/1988-60-0x0000000001000000-0x000000000100A000-memory.dmp

      Filesize

      40KB

      Download