Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    4s
  • max time network
    35s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/10/2022, 05:18

General

  • Target

    34fca26703a31bb275f41032a8486bf66fc2144e5051c3fb0642036792cda42e.exe

  • Size

    313KB

  • MD5

    bd4a52e7cebd44d4d9b8f18b8d513cc8

  • SHA1

    4c565bb6ebea4a6e19fcc94f02cc92390d3d8afd

  • SHA256

    34fca26703a31bb275f41032a8486bf66fc2144e5051c3fb0642036792cda42e

  • SHA512

    b1b2a663550bfbf40022862800632d2600452489b59971fb0d4ce10dfbfc80ecafdb53778f4f85292c3566ab685405755c12ed4c434018749dd09ca494a6c530

  • SSDEEP

    6144:Jrb9uEo2S1YnQmCX492DkwNP3qpYFl2YyPuFITzyccux7rnrOzprCoMH:JrRu6/eIo4t3PuFITKUAk

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\34fca26703a31bb275f41032a8486bf66fc2144e5051c3fb0642036792cda42e.exe
    "C:\Users\Admin\AppData\Local\Temp\34fca26703a31bb275f41032a8486bf66fc2144e5051c3fb0642036792cda42e.exe"
    1⤵
    • Loads dropped DLL
    PID:3376

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\Tsu8F86F5AA.dll

    Filesize

    33KB

    MD5

    079312abc0f5cd9b517c7f7c57f3895e

    SHA1

    396da30f39a544fbfdb5841b5e08528e78fe697d

    SHA256

    b8ccd1fc90d0181858a9537577e01415920991016b78f58f7842a483829e828f

    SHA512

    b4a2e0ebd1045f132bff24ff425c778bfc6ba55440173f1145263b8c39cfddb96de7ca29f7afd21c8be27bbcdb8486bed797cf7e19cf12a4ffc6643b447fd359

  • C:\Users\Admin\AppData\Local\Temp\{C949D2E2-D8D9-45D0-A73B-90FB12AAF014}\Custom.dll

    Filesize

    33KB

    MD5

    067489ddee5eb40a653bba0b86e8d2fc

    SHA1

    98cbd75011782fec1b8e489bede9cc23fcfabd4b

    SHA256

    0db8f1e097a1f26e383d803acc4e242ce61c60e97774dc8115306175b4bf3769

    SHA512

    c24853ae9da89163e66ef44d0c200e23f2039c35bb1bef7b952553ef3fe4a12590ea80cb5972ccd9e7473765102eb2206d2b4468d53e8ebc71990308c9eeb4a8

  • C:\Users\Admin\AppData\Local\Temp\{C949D2E2-D8D9-45D0-A73B-90FB12AAF014}\_Setup.dll

    Filesize

    33KB

    MD5

    bc2598913f887901137092f4e3e13c92

    SHA1

    2d937e82ec7e352c37327ab637ffeeada4c9fe19

    SHA256

    c13b1e1df51afe4c0e7c92d89dce6fb561c580da3876d6fad8ceeca9b3a0c217

    SHA512

    fab6c8f170816b8090f9f7971a1fc307c1b0bef71183870729ecb0ceb217fc3cae5973bd2d6fd9422627ebbf5deed840389e3633885840720b1021e0d9c6d218