Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
91s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
20/10/2022, 08:54
Static task
static1
Behavioral task
behavioral1
Sample
479fa26de93db373245a32df72d989934973c8563e79a3d1124b88f971f3a397.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
479fa26de93db373245a32df72d989934973c8563e79a3d1124b88f971f3a397.exe
Resource
win10v2004-20220812-en
General
-
Target
479fa26de93db373245a32df72d989934973c8563e79a3d1124b88f971f3a397.exe
-
Size
181KB
-
MD5
818b62040e19b4ddff375f6200a7c580
-
SHA1
23040576c767076e3ca2ff1fab93cce4caf4bad3
-
SHA256
479fa26de93db373245a32df72d989934973c8563e79a3d1124b88f971f3a397
-
SHA512
83cbdbd3f30913fd1a81d35816ef7be23f8553cf42c84f32112abde82caead69012cd76397d79635932cdf0326513b07522584899bdf2802b3273a6eb5f7c434
-
SSDEEP
3072:pidj6ShhYRa3SXjF/HvD9hQU7OCyIjAYxRwmdPkmkWt+3t97SVKmHkAJbbvAKclo:pEjpvYc3YJ/HvD9hTKCyI7TwmdMlL99e
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
pid Process 4424 nkvxlye.exe -
Modifies AppInit DLL entries 2 TTPs
-
Drops file in Program Files directory 2 IoCs
description ioc Process File created C:\PROGRA~3\Mozilla\mmpvyam.dll nkvxlye.exe File created C:\PROGRA~3\Mozilla\nkvxlye.exe 479fa26de93db373245a32df72d989934973c8563e79a3d1124b88f971f3a397.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\479fa26de93db373245a32df72d989934973c8563e79a3d1124b88f971f3a397.exe"C:\Users\Admin\AppData\Local\Temp\479fa26de93db373245a32df72d989934973c8563e79a3d1124b88f971f3a397.exe"1⤵
- Drops file in Program Files directory
PID:1044
-
C:\PROGRA~3\Mozilla\nkvxlye.exeC:\PROGRA~3\Mozilla\nkvxlye.exe -xqialii1⤵
- Executes dropped EXE
- Drops file in Program Files directory
PID:4424
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
181KB
MD58803a156afbda546041aa343b8d54882
SHA1b2b17b454b1b6c38c460814f9b9f7ed3e5656b24
SHA256de7dca35e43ad9c297c5efac07a8cf82c775a8f9dd74a5aab2bd8302e3ad29f0
SHA512fffc2b841036eeb2ddf9a237b88ab7114d5d6796514b34e6d3b047bccd304d92175f427d5fc1ec31ae727a790e9f8349d5507c2061c9106fc74d41b68ff732a5
-
Filesize
181KB
MD58803a156afbda546041aa343b8d54882
SHA1b2b17b454b1b6c38c460814f9b9f7ed3e5656b24
SHA256de7dca35e43ad9c297c5efac07a8cf82c775a8f9dd74a5aab2bd8302e3ad29f0
SHA512fffc2b841036eeb2ddf9a237b88ab7114d5d6796514b34e6d3b047bccd304d92175f427d5fc1ec31ae727a790e9f8349d5507c2061c9106fc74d41b68ff732a5