Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    153s
  • max time network
    156s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    21/10/2022, 05:18

General

  • Target

    f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe

  • Size

    64KB

  • MD5

    5bab09faba8fe3e31b093e5ef8cf389c

  • SHA1

    2dbadaa32662f95a667a51df1d4710853490e40d

  • SHA256

    f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042

  • SHA512

    af4d91b9a054930d6aa39ba74851eb710233d123f625f5554a17ebf8c8ca115f7884cf4d759a71ce9e5eae36e339bd174ecd75ade1213db1edf8f8be0710a83e

  • SSDEEP

    768:w6y4y49/HA/lhifdEe4YBEI0b0PP7p89CxqH2bWL2FfcrCsl8Y:w6zKlJrYBEI00sEqH2bW4UrqY

Score
6/10

Malware Config

Signatures

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Suspicious behavior: EnumeratesProcesses 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe
    "C:\Users\Admin\AppData\Local\Temp\f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:2960

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2960-132-0x0000000002150000-0x0000000002155000-memory.dmp

    Filesize

    20KB

  • memory/2960-133-0x0000000000400000-0x0000000000410000-memory.dmp

    Filesize

    64KB

  • memory/2960-134-0x0000000002150000-0x0000000002155000-memory.dmp

    Filesize

    20KB