Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2s
  • max time network
    32s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/10/2022, 03:26

General

  • Target

    7ceb3adb8e538da7963d32fe0a94614a767b16fa7c29260e77cb29cf8efefd69.exe

  • Size

    313KB

  • MD5

    b483adf889756aa29b2a104795a0733b

  • SHA1

    828786a07526dc49ec724d837bada701e3c24cbb

  • SHA256

    7ceb3adb8e538da7963d32fe0a94614a767b16fa7c29260e77cb29cf8efefd69

  • SHA512

    4262f3db60f25a7268a9f524bffb68f8748c0ef96f9c996a94c8d90592c915a01ad8901c2075b380891ab26bfd9c0441d9704f98c97f396cb9d343c894229693

  • SSDEEP

    6144:vrK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0LD:vryu6/eIo4vMResyEf0uP9d9UG0D

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\7ceb3adb8e538da7963d32fe0a94614a767b16fa7c29260e77cb29cf8efefd69.exe
    "C:\Users\Admin\AppData\Local\Temp\7ceb3adb8e538da7963d32fe0a94614a767b16fa7c29260e77cb29cf8efefd69.exe"
    1⤵
    • Loads dropped DLL
    PID:4768

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\Tsu12B4F388.dll

    Filesize

    11KB

    MD5

    3b09e9fe3afad071fbd945104342c736

    SHA1

    f1ed4e980242b64e7f78bdd1af9b70a1d1fe8484

    SHA256

    d1082a331e6f6274e11a14fa97764229d6846e5e4524492ee3700355b82ed6d8

    SHA512

    3854cb99ec61517a2be14ab3fcf4b743af250c129da18ebd6bfb51bbf7eda7b714dd4b6d30174657f8d108aea7705858dab74458a31b69804194d44162ca4d80

  • C:\Users\Admin\AppData\Local\Temp\{CB973377-4EAC-439A-A171-068E10741181}\Custom.dll

    Filesize

    26KB

    MD5

    98d6388c42206710b77c3d4fa3f98cd3

    SHA1

    342b8680c5cf07e376b0155431f574bf44c8aaf8

    SHA256

    4cda55fe0b4968d862a9229d5e3c5620e9a2bc0f29f88ad21dd27486bca3c924

    SHA512

    f261bf30858c674ecbc8e24a4ceafbafad1772e7098dde68b32ab132843b5152c0a48bee2232e06e038cd554cebfbf8abc34a870b0951f6491dcc16c0d37859f

  • C:\Users\Admin\AppData\Local\Temp\{CB973377-4EAC-439A-A171-068E10741181}\_Setup.dll

    Filesize

    17KB

    MD5

    158484f89c86a53575cc793a54c12539

    SHA1

    58b2adf8b0084ac0f6a9fc7cf157d288a319251c

    SHA256

    d099771f27c42c049c0177e0c5bd9a12cc67abd67c71c051a2201c9ca9cada87

    SHA512

    289733e47992ffd4cfa203cec2908d616691b588b9cb32eaf243a6030ef1c58c9f2cadb7672f1861eb4b55174896c7ad850b9216a1a1e7d3f5fd250c69a0f8ed