Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    25s
  • max time network
    56s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/10/2022, 04:00

General

  • Target

    b1705327394f18a76cf41063c9541c4c1aabb056fcb47279863758567465e348.exe

  • Size

    316KB

  • MD5

    80192fa48cd84f5d5f0dc1de65e4e33b

  • SHA1

    8a91c9452719d611321fe3c8d88a0c283746b4f8

  • SHA256

    b1705327394f18a76cf41063c9541c4c1aabb056fcb47279863758567465e348

  • SHA512

    0bee7d3ad33f7edb6f87f33132951137d1a2c68c35c06d8934c585cbee907ae844682eb30544599e4830fa5a455555938d5e3093d9d55fd48d72f47f5a15ce6a

  • SSDEEP

    6144:CribUzkuvcBYC47l2xLNaFmoKZLxtHU/TMDkW01eedmQb+xu:Cr7kuveY33FJUo7MDkA6D

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b1705327394f18a76cf41063c9541c4c1aabb056fcb47279863758567465e348.exe
    "C:\Users\Admin\AppData\Local\Temp\b1705327394f18a76cf41063c9541c4c1aabb056fcb47279863758567465e348.exe"
    1⤵
    • Loads dropped DLL
    PID:2556

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\Tsu5C5F59D7.dll

    Filesize

    31KB

    MD5

    b23f2ef221da6176ae1f64883a9cf837

    SHA1

    ceb697187ea5e00a8bdaaabeefe464de96e01edf

    SHA256

    58d54af6c3c4330315e2a1e02f8c5976069aa97af326c218aafd1113507a49be

    SHA512

    722f2d277e4f4665a881c2d11936e05a4295affc55c7748726e04b07c97ca356429312f246d94307c4bfe4d61a529b9b7f3af1f3db18211454e4f3954f51feda

  • C:\Users\Admin\AppData\Local\Temp\{EFDD4FD0-9A2B-4E6F-AC84-D209343E6D26}\Custom.dll

    Filesize

    11KB

    MD5

    b343f9e78c813cae8b07d347602653bb

    SHA1

    836cec0ee3022cb533695073ecc7bae140713c20

    SHA256

    71bbfcade7c0e225c441201df1e4b60d8de2b2a67591bc8e452300ef1c03a262

    SHA512

    4047982b2a4f07fe1f08d6bdc42e28ccdcef4250e6102ebe15f22150248c670c3ade73d40edcab95ce7714e0c9e855fb026cf4825ff44468aec4042df989dbfb

  • C:\Users\Admin\AppData\Local\Temp\{EFDD4FD0-9A2B-4E6F-AC84-D209343E6D26}\_Setup.dll

    Filesize

    33KB

    MD5

    cf5307ad002e59dca0cff3bfcbb754a9

    SHA1

    a1402db273991d043538bb4aa025b1b87ebda6ae

    SHA256

    c6093ce257d0137c0cbd65f161ef8ee537c70eef6ca5913d71c823d66db86e98

    SHA512

    13e0e5efffe488879191cc529fd10dad9f2e98d38950bde250faa6aa9b22f3f449f3e738c51fc5e660cbc2bdb94105604269cccf4ba72374d747ae1efb20195b