Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    41s
  • max time network
    67s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/10/2022, 02:36

General

  • Target

    6d0ce7ee9278ea2ea4d52693f01282c34453aa8d105e72017edec2add6fbfc43.exe

  • Size

    327KB

  • MD5

    d05a6577dea1d3ced647ebac687a53e2

  • SHA1

    5a3985f80527cd484110047fd123041456c822e1

  • SHA256

    6d0ce7ee9278ea2ea4d52693f01282c34453aa8d105e72017edec2add6fbfc43

  • SHA512

    d4ef5f9b38c8eb764038dc6f1ef3beaa9c5bece6ca653706bf2b6fee17b5c232a7089f61b9d221ac341e1a23d7f8116e8b08eda7b1e2163c81683c101975e187

  • SSDEEP

    6144:Jr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6F7u:Jr4iu6/eIo4Rsw33AtsmQz

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\6d0ce7ee9278ea2ea4d52693f01282c34453aa8d105e72017edec2add6fbfc43.exe
    "C:\Users\Admin\AppData\Local\Temp\6d0ce7ee9278ea2ea4d52693f01282c34453aa8d105e72017edec2add6fbfc43.exe"
    1⤵
    • Loads dropped DLL
    PID:420

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\Tsu71CE4289.dll

    Filesize

    15KB

    MD5

    02432ac050232477349bfbbeaa556a43

    SHA1

    b1e7e9261b9f8ac6dde9af7409926cb43a67af2a

    SHA256

    7f8373fe98eb16e1714df76d73741c645fbbacee719285cd9672639f3d38c739

    SHA512

    84f9fb367a797720344c6a1ea8d7fca59d20a434796cefd628b1c1e2b721cef7f9917cae3c218112a2ad551899a333e26e242f35e647359364e171ee527233e7

  • C:\Users\Admin\AppData\Local\Temp\{AA6D3B90-6374-420C-A0E7-2B56718E1966}\Custom.dll

    Filesize

    38KB

    MD5

    afc8b2e91fd63707b32c8bb2ce28122f

    SHA1

    e906ce4102bd62fe79bc88c482bf84e2d2bffab6

    SHA256

    35af74e89351f685db1415baff4f5100d1fd7d6810a0ca598a5fe0c18e00bebb

    SHA512

    1b36d6be89cceb6017641d87cc8a85394930457bb67f2b57106b87030a59badc46596145236554c7b35e4bac80b5f1d46ecc26b5b15a70b7ec2730a104cfc082

  • C:\Users\Admin\AppData\Local\Temp\{AA6D3B90-6374-420C-A0E7-2B56718E1966}\_Setup.dll

    Filesize

    51KB

    MD5

    1bf3d389a70be1591b717dc45d53da12

    SHA1

    fa4aa7c68ea5b8e1f435724f9891a3a580158d54

    SHA256

    f16a90a533d64c0bd4807b6a6d45c7d7d2ec27bfdb7969c6fce8a2a9402a85e5

    SHA512

    5cfd49ac6880e82443aaf83e3f276f2710c09a1f13c64100db6407f02ba7f3cee17c909a6106902c921a2be5a38566267ceb0b8c7e848c0d76ce54ac735d11b8