Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    90s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28/10/2022, 20:50

General

  • Target

    1bebc3850cbe41d3addeb913e1d7e01d2c757269dcf75b433d17a742c15125d6.exe

  • Size

    227KB

  • MD5

    0ce206a497fa590a956e67ef7304f450

  • SHA1

    72ead1e090920d4da9fc447ae90f585188820613

  • SHA256

    1bebc3850cbe41d3addeb913e1d7e01d2c757269dcf75b433d17a742c15125d6

  • SHA512

    2041a0c2c4a2dc2ff696bdc22dcc4244f0e91c146f587e60d94e76463caaeb48db33be00e26354549d8c3a2cebaea3024509f1cf4376506f01918ec456085365

  • SSDEEP

    3072:DJKvhBDtse25QLttWnHEmvZkEMU5Xujlqggqhlp0FiWcqYWZJr27:DJiIQLXuF1MRjlqggSwFi0H27

Score
6/10

Malware Config

Signatures

  • Maps connected drives based on registry 3 TTPs 2 IoCs

    Disk information is often read in order to detect sandboxing environments.

  • Drops file in Windows directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1bebc3850cbe41d3addeb913e1d7e01d2c757269dcf75b433d17a742c15125d6.exe
    "C:\Users\Admin\AppData\Local\Temp\1bebc3850cbe41d3addeb913e1d7e01d2c757269dcf75b433d17a742c15125d6.exe"
    1⤵
    • Maps connected drives based on registry
    • Drops file in Windows directory
    PID:1016

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1016-132-0x0000000001E90000-0x0000000001EBF000-memory.dmp

    Filesize

    188KB

  • memory/1016-136-0x0000000001F00000-0x0000000001F27000-memory.dmp

    Filesize

    156KB

  • memory/1016-140-0x0000000001500000-0x0000000001600000-memory.dmp

    Filesize

    1024KB