Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    25s
  • max time network
    40s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/10/2022, 05:00

General

  • Target

    3e9639ee0115cf6115fe86a11e824aea4a8a66dad164a50c02572758ceb42786.exe

  • Size

    316KB

  • MD5

    a90fb8fb21c76e5b7632478bc178f594

  • SHA1

    a149981c82d7d91c1d49b9dcae86a3277531c2c1

  • SHA256

    3e9639ee0115cf6115fe86a11e824aea4a8a66dad164a50c02572758ceb42786

  • SHA512

    9e509e379bebbeb80755745d24ac48ec521828ceb084a3af8d2e1ceae613db074662c82538746323a8cd5497edea379ca069248e41c3fb84ac8b15d2379a6161

  • SSDEEP

    6144:jr/bUzkuvcBYC47l2xij4YTfpczmap8spMPed0VdtM9BdjhYN+:jr0kuveY3cY1cia66MGd0Vs9BdNz

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3e9639ee0115cf6115fe86a11e824aea4a8a66dad164a50c02572758ceb42786.exe
    "C:\Users\Admin\AppData\Local\Temp\3e9639ee0115cf6115fe86a11e824aea4a8a66dad164a50c02572758ceb42786.exe"
    1⤵
    • Loads dropped DLL
    PID:5064

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\TsuB2EE2F0E.dll

    Filesize

    31KB

    MD5

    5eddef19940bc43d37806b385c314c4a

    SHA1

    2bedfe9c52aa05a634d59eda8b12f33c7059991b

    SHA256

    77c2da72f6396de69868fd6c133ff4322cdd0f1137c786df6de1774d6c2cec01

    SHA512

    d502100d5f3408fc9b9e7c8ade776f3ef1eb7bbb4967edc34f8db0ca2d563e93a03370e8f19e9c16a9d2915e3c72e73b814cfc3e9ad14ecdb94c762b43dc46b6

  • C:\Users\Admin\AppData\Local\Temp\{DF49C0C2-D7A2-47B0-A55B-9F8004AAE234}\Custom.dll

    Filesize

    91KB

    MD5

    52ffb9f31fcf351bed204ed2fa781954

    SHA1

    7acb17bc45cf6edc71726e59fb8a1d37eca51a55

    SHA256

    eb99eb74c3736102b174d6d7ff9afaa43bab8ad4bccfac53bb4dbb80392aa1d4

    SHA512

    841c2683068522077d6f347c17d59815bf5f94015d6b539f6a3248c00bfb8a56360c2c7b3c8960dbda497e76fb88f8859bb5c1a7f80b24fe03dbf00db187f4b9

  • C:\Users\Admin\AppData\Local\Temp\{DF49C0C2-D7A2-47B0-A55B-9F8004AAE234}\_Setup.dll

    Filesize

    116KB

    MD5

    356c0fb8093fc9ef7b30a2d533031c23

    SHA1

    90d98c0aca12f0ffcb37f6e87db97c61d68833fb

    SHA256

    db77f6bcbe15d8b6c2b8dd5d4b79f0b44335ce123d1a2236e0981889d9908931

    SHA512

    2adab0abcf43157355f5b4c8f06bc7376c839b102c26f283ed3d0215ba3965c6dd82f9dc69da2ad4274d4dc0a5e6f4f48d29b7dc33cd04340fe32c3bcdf34757