Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    151s
  • max time network
    111s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    17/10/2022, 09:16

General

  • Target

    f94a7700511ad718e77b241fdecc4dcfdc8a948634e4f21d2fd20755e66159e0.exe

  • Size

    76KB

  • MD5

    ea1eea59b96cf1ed2eb014efc551f350

  • SHA1

    3a197428621423a97f7015fcdcccc0f29ab034cf

  • SHA256

    f94a7700511ad718e77b241fdecc4dcfdc8a948634e4f21d2fd20755e66159e0

  • SHA512

    0a71a3a3f79ce8785a8f2643827e2214970d5b460686a84a2cd3b91ba9fb80e8d42036c53b537d7cec3b9b47f5c0cedf20b4b4b19c767f50a1cd546d88a45770

  • SSDEEP

    1536:5aiqH1s+kCtrA2UMT0mTFibDKa1xPHh+CbZCGBtrx:A1B31bdBob2QxPHwgZC8N

Score
10/10

Malware Config

Signatures

  • Modifies WinLogon for persistence 2 TTPs 1 IoCs
  • Drops file in System32 directory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f94a7700511ad718e77b241fdecc4dcfdc8a948634e4f21d2fd20755e66159e0.exe
    "C:\Users\Admin\AppData\Local\Temp\f94a7700511ad718e77b241fdecc4dcfdc8a948634e4f21d2fd20755e66159e0.exe"
    1⤵
    • Modifies WinLogon for persistence
    • Drops file in System32 directory
    PID:1784

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads