Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    45s
  • max time network
    97s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/10/2022, 01:04

General

  • Target

    053e161906f340b6605bc9e7889238c40dc524c50bac4199adb86234244326ac.exe

  • Size

    18KB

  • MD5

    0c139b0d162326d8acef1d29a2b88670

  • SHA1

    d09b157728aeaef63eaa64c7aa4bb7faf7e28381

  • SHA256

    053e161906f340b6605bc9e7889238c40dc524c50bac4199adb86234244326ac

  • SHA512

    1aac062b051fd22ef204eb86bda6d8e07f45c70345c73ea61bc44b21159c3a8750125d4ad9a029ef312e4ec84be78210548c1afd3b110bc0edac135672cf4ffe

  • SSDEEP

    192:pWWN3OhAao7iFCEdRSwLwlYckb7LrmqBuG4svm4Ydk/HDr4On8bWMBcfhA+HU:pBObo+g8R1LGYck2+N72koQABc5E

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\053e161906f340b6605bc9e7889238c40dc524c50bac4199adb86234244326ac.exe
    "C:\Users\Admin\AppData\Local\Temp\053e161906f340b6605bc9e7889238c40dc524c50bac4199adb86234244326ac.exe"
    1⤵
      PID:392
      • C:\Users\Admin\AppData\Local\Temp\budha.exe
        "C:\Users\Admin\AppData\Local\Temp\budha.exe"
        2⤵
          PID:4836

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • C:\Users\Admin\AppData\Local\Temp\budha.exe

        Filesize

        18KB

        MD5

        812125347f0e419227a3b8ef18e22897

        SHA1

        6e8e07acf81231d12d83801e7eabad0c3ef179fa

        SHA256

        e3df6c3d966bda5481a6a415290f6fada8454475e41d925edb4361806777f114

        SHA512

        3d100f04994aad200574fe488475667e9ddebe4ea917cf69369f5667746065ee861ccd936cbc67f493e01f94aa58635e392bf004a2c6e09a4b05c2d7b9788cbf

      • C:\Users\Admin\AppData\Local\Temp\budha.exe

        Filesize

        18KB

        MD5

        812125347f0e419227a3b8ef18e22897

        SHA1

        6e8e07acf81231d12d83801e7eabad0c3ef179fa

        SHA256

        e3df6c3d966bda5481a6a415290f6fada8454475e41d925edb4361806777f114

        SHA512

        3d100f04994aad200574fe488475667e9ddebe4ea917cf69369f5667746065ee861ccd936cbc67f493e01f94aa58635e392bf004a2c6e09a4b05c2d7b9788cbf

      • memory/392-132-0x0000000000400000-0x0000000000407000-memory.dmp

        Filesize

        28KB

      • memory/392-133-0x0000000002150000-0x0000000002157000-memory.dmp

        Filesize

        28KB

      • memory/392-137-0x0000000000400000-0x0000000000407000-memory.dmp

        Filesize

        28KB