Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    58s
  • max time network
    4s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/10/2022, 05:35

General

  • Target

    e241991e7f62d3d7076108c653ef765cf73d54101272a1c89b01a063e829b3ab.exe

  • Size

    327KB

  • MD5

    70f6ff30c5624a7d76f9b173b9552d0e

  • SHA1

    11f641c467e6bd82fda308fe2604fa9884310edf

  • SHA256

    e241991e7f62d3d7076108c653ef765cf73d54101272a1c89b01a063e829b3ab

  • SHA512

    9f62cfd21f18eb20b5c44e9ead47fb0eb4851945f2317e73cf34bb0f94e657961aaa7e1627fc2d1af2cf4151a48ea9ad3e55be889d0186468d27a7c9e44e2a92

  • SSDEEP

    6144:hr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6Fl9:hr4iu6/eIo4Rsw33AtsmQ+

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\e241991e7f62d3d7076108c653ef765cf73d54101272a1c89b01a063e829b3ab.exe
    "C:\Users\Admin\AppData\Local\Temp\e241991e7f62d3d7076108c653ef765cf73d54101272a1c89b01a063e829b3ab.exe"
    1⤵
    • Loads dropped DLL
    PID:4736

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\TsuC6EC29DE.dll

    Filesize

    20KB

    MD5

    04a671b06efa6901e96a519a5ac01485

    SHA1

    9cbc4432b685794557f1c2084b3017d342340aef

    SHA256

    3d51bfc3e7ca4a6ba58a2dd54d54704649a9c64e932eb5ca972f1ebd39c67b75

    SHA512

    daf9cbe7c1ec531cb70cd31e268e3bf6bc2b78292c0b37c32d9e788b1749f61e71a8574a8bd55eaaf72e5723a7a046e2dfaa3f4fe51db99e99c78b5c10e858ab

  • C:\Users\Admin\AppData\Local\Temp\{5C88DF76-C10A-4417-A6FC-8928876BFD80}\Custom.dll

    Filesize

    16KB

    MD5

    9aa23fa77a12d66b73f5ed400cc79dab

    SHA1

    2025f2a01224a47b939cbbec2a69ed8bd7c0dc65

    SHA256

    b549323123855aee3614ac5391ad369c2e237999e9ff65e587b892c6b6c1fca4

    SHA512

    a3b13a44234be680027cc0573555c68f213b52ac27a32480ad6631c78061cbfe84cdfe088259fb553f4223116ddfa52a980db16602757ee37eacf5d8d258579c

  • C:\Users\Admin\AppData\Local\Temp\{5C88DF76-C10A-4417-A6FC-8928876BFD80}\_Setup.dll

    Filesize

    15KB

    MD5

    f79b9c3fc3c95832193c0a854cf676b1

    SHA1

    f730f70df39c0dc74e1e164c5acf8333fb4d83bb

    SHA256

    992d9e750cbe178a7850874c5e69fcb5c5bcf597bc9a150b66f666c3743f92f0

    SHA512

    fdd63dadea474130a8a07502b24f112b7c480807224e2598f2cdd9cad17a5a376b9782bb190837e9d325f0046e08035911fa31e5e315233831670d1f65ea13bf