Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    25s
  • max time network
    46s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/10/2022, 02:31

General

  • Target

    7ca657ce283bcc671ecf9d2620e03ca8bab27eb7fd4fe1bb06e04b301ee02daf.exe

  • Size

    304KB

  • MD5

    a72dc570d644d3582ae401243845d39e

  • SHA1

    925d779b924b1fec6819479817a97967417fe17a

  • SHA256

    7ca657ce283bcc671ecf9d2620e03ca8bab27eb7fd4fe1bb06e04b301ee02daf

  • SHA512

    5eb12323d3e6f0028ef2dc8d7b570c4e7afee2165c4deff01182ff225f0bcac647f1706be82176eb4b01f10ec836010e9ef2045e29ed42b24efd48653590163c

  • SSDEEP

    6144:1rkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyP2:1rkuu6/eIo4tQW62T+uTwM6YVxm242

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\7ca657ce283bcc671ecf9d2620e03ca8bab27eb7fd4fe1bb06e04b301ee02daf.exe
    "C:\Users\Admin\AppData\Local\Temp\7ca657ce283bcc671ecf9d2620e03ca8bab27eb7fd4fe1bb06e04b301ee02daf.exe"
    1⤵
    • Loads dropped DLL
    PID:4872

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\Tsu16323CCF.dll

    Filesize

    55KB

    MD5

    16a75573f44eda02d5cf4856964d365a

    SHA1

    6327133557684c7d403bbcdadbbe125d976647c0

    SHA256

    aca68297edceeb7113edb9548ee9b742794d0a8f4ed6b2b518398981284221f3

    SHA512

    0645f18bcf82cc13d647214db7eccb2e340af6186f58d7d797ada05ba38f5800db5d78734d3d4be1f145f3ce61e9bec5d012220d5807db7d82d83e01b0cd804a

  • C:\Users\Admin\AppData\Local\Temp\{5FB94AFE-16FA-4A66-A88D-5ED8845A6808}\Custom.dll

    Filesize

    49KB

    MD5

    0bc5325a8b93fa45aaff6c0951d2e7c9

    SHA1

    c0a223e28d8deda993103a762d48c9e076961858

    SHA256

    8a586345794a69bc102c40608b86bfa301af792f2f72f513d2c06c16543f8e93

    SHA512

    40ec91f41e05cd074728f92cca9267df5c78d31afe111c180d26204ae221b91f8be64fa31689ed575f36ed64bc2845bcc7f2c117b8db76dc3b598fc489acb774

  • C:\Users\Admin\AppData\Local\Temp\{5FB94AFE-16FA-4A66-A88D-5ED8845A6808}\_Setup.dll

    Filesize

    66KB

    MD5

    938415663804d2da8cfdff30f439920e

    SHA1

    b31d6286c28b2af796f98f93fa57f7a1d20a3c66

    SHA256

    a4fe3ca69d6af653f16d7f54b82a697c2609656549879229f78b524a3f252f58

    SHA512

    3cb31fcfb90dd0d50a4da478f3e105dfe68703a2a89718f47e2a910e0c1019e7376062a30d05306f32551587ea3462d02e3dbd9bd4002bfaaa82f961d9f0e75e