Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    3s
  • max time network
    15s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/10/2022, 01:58

General

  • Target

    cbd1e9d6e37b8e95df2f2e49fd1a060b815844fc1d0661b2fa8153c5ae37f4a5.exe

  • Size

    347KB

  • MD5

    fd0430f11184b0d0f829de10236d2b72

  • SHA1

    138f2f6d454b586597a02ffc893bd5105f6c5a30

  • SHA256

    cbd1e9d6e37b8e95df2f2e49fd1a060b815844fc1d0661b2fa8153c5ae37f4a5

  • SHA512

    361efb9b6f095bee3d96c0e24b218aeb87c250a2b0f3bafa7e5b8bb7da849275f833e20eb7d5d2f5dc517397b498f5e63f69b3b45988a72bd9bd797db8982e52

  • SSDEEP

    6144:l7vJRFbFHskwgF7PQP7oqQtLoEw1QuNJ0zLkigCI76xJG5usY7Y3BGil05eQ9P0:FvJRFxcToqQts3Qun03EC2oGUsY7ABdJ

Score
6/10

Malware Config

Signatures

  • Maps connected drives based on registry 3 TTPs 2 IoCs

    Disk information is often read in order to detect sandboxing environments.

Processes

  • C:\Users\Admin\AppData\Local\Temp\cbd1e9d6e37b8e95df2f2e49fd1a060b815844fc1d0661b2fa8153c5ae37f4a5.exe
    "C:\Users\Admin\AppData\Local\Temp\cbd1e9d6e37b8e95df2f2e49fd1a060b815844fc1d0661b2fa8153c5ae37f4a5.exe"
    1⤵
    • Maps connected drives based on registry
    PID:1936

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1936-132-0x0000000001170000-0x00000000011AB000-memory.dmp

    Filesize

    236KB

  • memory/1936-133-0x0000000003DF0000-0x0000000003E1F000-memory.dmp

    Filesize

    188KB

  • memory/1936-137-0x0000000004A50000-0x0000000004A77000-memory.dmp

    Filesize

    156KB

  • memory/1936-141-0x0000000001170000-0x00000000011AB000-memory.dmp

    Filesize

    236KB