Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
96s -
max time network
185s -
platform
windows10-1703_x64 -
resource
win10-20220812-en -
resource tags
-
submitted
12/10/2022, 05:27
General
-
Target
4f93b05a243d6a948599fc8ff1ce43e798cad88f1882f14918f75410fda7819b.exe
-
Size
1.2MB
-
MD5
d7bd349797b5965c05c7cb208821b3e5
-
SHA1
1abbcfe673bb47c2b1a82905c5f90ed421ad13c3
-
SHA256
4f93b05a243d6a948599fc8ff1ce43e798cad88f1882f14918f75410fda7819b
-
SHA512
a906373550d6e1817b46e0c615deef4bf66a2a5fc5959596791d945b4756f3a529d35a374864297a87cc42ac5ddb36c5946b50fd51a94b4f8b1218e50693dd67
-
SSDEEP
24576:TpLMncW+jn2uchvYDwhrXliJGGDBTXZQ9Y4czbHWjCGL9gr67Cb8c:I+j/sv2UDluGqZ6Y4czb6cn8c
Malware Config
Extracted
danabot
-
embedded_hash
A813CAF845B5703DA814AF785BB60B21
-
type
loader
Signatures
-
Danabot
Danabot is a modular banking Trojan that has been linked with other malware.
-
Program crash 1 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\4f93b05a243d6a948599fc8ff1ce43e798cad88f1882f14918f75410fda7819b.exe"C:\Users\Admin\AppData\Local\Temp\4f93b05a243d6a948599fc8ff1ce43e798cad88f1882f14918f75410fda7819b.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\appidtel.exeC:\Windows\system32\appidtel.exe2⤵
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1968 -s 5722⤵
- Program crash
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.9MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
2.9MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.2MB
-
Filesize
2.8MB
-
Filesize
2.9MB
-
Filesize
2.9MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.2MB
-
Filesize
1.6MB
-
Filesize
2.9MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB