Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    6s
  • max time network
    6s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/10/2022, 04:52

General

  • Target

    d0dad7f4c3dd3a934da40f0b7031919344ae87d8b965d7566d851b979a9219ee.exe

  • Size

    327KB

  • MD5

    b923b7934af80dc370706fded3b75c6b

  • SHA1

    44f661bdc174aff75c19895a4eafe1a50ae0a667

  • SHA256

    d0dad7f4c3dd3a934da40f0b7031919344ae87d8b965d7566d851b979a9219ee

  • SHA512

    1804dcadfda7c7e27fa1f20723bb72c369fe63f9372f94f9a0b86d9e2d59250da9b66166670c9f2d129c83484d9e18261c60f8d9cc55be91c4f66e6b2d21ca14

  • SSDEEP

    6144:xr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6Fd:xr4iu6/eIo4Rsw33AtsmQQ

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\d0dad7f4c3dd3a934da40f0b7031919344ae87d8b965d7566d851b979a9219ee.exe
    "C:\Users\Admin\AppData\Local\Temp\d0dad7f4c3dd3a934da40f0b7031919344ae87d8b965d7566d851b979a9219ee.exe"
    1⤵
    • Loads dropped DLL
    PID:4840

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\TsuF0F475C7.dll

    Filesize

    22KB

    MD5

    1ccf5f337d4d9bff45e6414c0ca37e97

    SHA1

    7699557041397bcfe0d0e641389a144caf72e1db

    SHA256

    5bec4be22fc9905cb73fbde5215bbec5aecdeca364be92c81d504e7b4a77cb82

    SHA512

    b6d98a0b506aba2420656df52c2aef95b40c994f472b7baf2b07f9dd3506b408dd886ccee0f51ff20b92d1cf691d582dc2a99717d76c87e1b7e2e142ac04c09c

  • C:\Users\Admin\AppData\Local\Temp\{E328E592-6D4C-48B6-AA5D-256E38CBC764}\Custom.dll

    Filesize

    35KB

    MD5

    370a53904299afeb25ddb4d85df30003

    SHA1

    7e31eecc56ccaa5a36f742002dd04f31584fd983

    SHA256

    3b381a2e5094fa6131cd1bf9e881f04a48473663b0d6a0312126329b571467a0

    SHA512

    70a1519836109c5d6d5f63d9df7524a82dad25e0db75de00cbf9efe644eb43f3ebb459f355eca3873e72f5ed03015ef87c2c231d23e983a5b18140c73b8a5e9a

  • C:\Users\Admin\AppData\Local\Temp\{E328E592-6D4C-48B6-AA5D-256E38CBC764}\_Setup.dll

    Filesize

    52KB

    MD5

    0b2354196cb321b76cbaa1db0a555c07

    SHA1

    963e3b0caa8eea7119f77245ba7754fbb4a2ca08

    SHA256

    42e9d73e9c9091795bb7009b84780031153e839d5fb149040e3443bd2cc242e8

    SHA512

    18027ff42f919d4f1a1515f56833133570db7feed1b4b9f4e0ff9c16fe0465eeb0d6a8f4085f2d27858cf4ea13dbd2993db145d3aed36b52753cc1e8bdbae6f1