Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

8

df76bc54e7...54.exe

windows7-x64

8

df76bc54e7...54.exe

windows10-2004-x64

8

Analysis

  • max time kernel
    150s
  • max time network
    157s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19/10/2022, 17:29

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    df76bc54e7bfc130c353a92f99f5d00ac4dd987ba0c3b8b23cae0299647e5e54.exe

  • Size

    65KB

  • MD5

    a0d47ec2db849363cba70898445126c0

  • SHA1

    0e49110e3adca98d2a3ca583c02533b0b5e380d6

  • SHA256

    df76bc54e7bfc130c353a92f99f5d00ac4dd987ba0c3b8b23cae0299647e5e54

  • SHA512

    8aaa167c88de303c7575e903d398be50a66f453eff09abce7d31d00d1ef544d59068e177577681a06e0d1d09703446d260a7ffa6dac47ea346674d8f0cc3cdb9

  • SSDEEP

    1536:KHoSCdeVMCT6ggMw4Y7FgG2xV89mTr39w6k2L5baULqbA:KHoLde/OgV432UcP39hvF+8j

Score
8/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Drops file in Windows directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\df76bc54e7bfc130c353a92f99f5d00ac4dd987ba0c3b8b23cae0299647e5e54.exe
    "C:\Users\Admin\AppData\Local\Temp\df76bc54e7bfc130c353a92f99f5d00ac4dd987ba0c3b8b23cae0299647e5e54.exe"
    1⤵
    • Drops file in Windows directory
    PID:2164

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2164-132-0x0000000000400000-0x0000000000428000-memory.dmp

    Filesize

    160KB

    Download