Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    25s
  • max time network
    39s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/10/2022, 08:12

General

  • Target

    3d2ef565eabe06ff90f2ccf98ac39a0f03c50fe370ac99d4b1aafd4af76295f0.exe

  • Size

    312KB

  • MD5

    972548955c6a2a232ec58d4e2251a5c7

  • SHA1

    5d17184b2d70d625e12bbf0bc4e2739214be66b2

  • SHA256

    3d2ef565eabe06ff90f2ccf98ac39a0f03c50fe370ac99d4b1aafd4af76295f0

  • SHA512

    78f042d4c9d4587fc18a513c129d0d105ce92ea9bb7f6d6c4c57350bf56f370f43f3979047483a013fba9a2be6101f54747bc58995edd26aa224a915be610512

  • SSDEEP

    6144:xrkS9uEo2S1YnQmCX492DkwNP3qpYFK3WSsmbjbqKcs3wP8pXAN7iiH:xrkau6/eIo43ts7KcXgXAN7i6

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3d2ef565eabe06ff90f2ccf98ac39a0f03c50fe370ac99d4b1aafd4af76295f0.exe
    "C:\Users\Admin\AppData\Local\Temp\3d2ef565eabe06ff90f2ccf98ac39a0f03c50fe370ac99d4b1aafd4af76295f0.exe"
    1⤵
    • Loads dropped DLL
    PID:4136

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\Tsu9B8C9B2B.dll

    Filesize

    5KB

    MD5

    5d51e22e1ddcacc0c9c452c8efa95f04

    SHA1

    e88bb4718af64f9b29a91d54e8cf3b79164675c7

    SHA256

    1f11b661c632111e3935be4c166485b301b3df9709cff2454f8a1215ec1028f6

    SHA512

    b0ae9e324aa20d86f8d5833c324fb7f65fbffaddafeb86889ab61788d64f2bb750cc0f6233bdec2bcece0935c138f5e26a0aacb3734f0c0168ab33e3c51586db

  • C:\Users\Admin\AppData\Local\Temp\{BBF8EC30-7332-4930-ABDB-3B10601BCEC6}\Custom.dll

    Filesize

    6KB

    MD5

    b5bfd743f288994e828fb07b61aa6120

    SHA1

    64cf521483accdb8953cc3eefd699f98a5bfb8ce

    SHA256

    39417b11facaeb9c215a32d28ed87d358067c660a5e8eee198e06fbe926506dd

    SHA512

    80a86b536ebbf720f3a3ef4c84c6eb0b903e8f632d1cd20087402d4397cb62c6e3cc42f07ecd2c3d9b9a5980f5ea3dcda065cf76c2150638af53cca96b5b7549

  • C:\Users\Admin\AppData\Local\Temp\{BBF8EC30-7332-4930-ABDB-3B10601BCEC6}\_Setup.dll

    Filesize

    5KB

    MD5

    9bab9d3ee06cd28645fb13034a14d23b

    SHA1

    eef3a6af918cc41f70b62bd4d682fc06f9e36471

    SHA256

    984bde239df350ca24a937175d278e8597ecf713fd4be8a70ea4034030d482e3

    SHA512

    43e193953f6509dd73c78098e16e096f2d0db090b9acc28558dc9e84f91c89ecf5f512f4b158998f4b5dd3067d0820e3ba4080952d8e0afa02c730b8ec62ea88