Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    4s
  • max time network
    4s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/10/2022, 09:13

General

  • Target

    169965b4aa768e81355fb1d07cb197c119c6d2a1932572e57a692817fc27af9c.exe

  • Size

    313KB

  • MD5

    f733723d3e1786c4ba0883354fac9bb4

  • SHA1

    a84278611811254c9863522787112bf77c34330b

  • SHA256

    169965b4aa768e81355fb1d07cb197c119c6d2a1932572e57a692817fc27af9c

  • SHA512

    ac0bda85fe3a071825357efded5a7b19c69a24852e73ca72fa86dcfca12cbdc83b5663da1047a497beaf3c17020d9272f5f2d7aa9a65dd6649847ced9d3a1ca4

  • SSDEEP

    6144:orJ9uEo2S1YnQmCX492DkwNP3qpYFQiY0Z56GICaNRCVEumbcF6ov5d889PgLVDF:orfu6/eIo4jVW5soVCcQovoO0DJM+EO

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\169965b4aa768e81355fb1d07cb197c119c6d2a1932572e57a692817fc27af9c.exe
    "C:\Users\Admin\AppData\Local\Temp\169965b4aa768e81355fb1d07cb197c119c6d2a1932572e57a692817fc27af9c.exe"
    1⤵
    • Loads dropped DLL
    PID:916

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\TsuBE709D06.dll

    Filesize

    16KB

    MD5

    f2c294c12a6f5b184998fff65f7d84a5

    SHA1

    1d71d7e45fd0698a161d276c6afb4c2d187b6a01

    SHA256

    290a7a29516b268a0bbae69d358db5ed5f3ce7e3fc05a560b18f8c979e765a37

    SHA512

    18fcd868e44c56ec34592c3674d2caab99cfb36f12e1e3671b61670cfe78cb527cd1f17cfa8254392e6511e93872849d0dc021e6244d632a85f7fb8dc1d46a38

  • C:\Users\Admin\AppData\Local\Temp\{9D7066CC-55CE-4B29-A9C2-1DEC4693443A}\Custom.dll

    Filesize

    13KB

    MD5

    a303628b2a4cf27df6dba4dabecf4350

    SHA1

    912c26b50909c0cc1fd2e70c16498d682c732c63

    SHA256

    7ed0d75d3679cbc2f3e69bf9d1471206d552572a61c91c04f004f9e34ae8aa51

    SHA512

    4a98a669ddd3e37da97f0cf8b259c1f3fc8b942e1bb5539d770735ba1ee349a1ecb66e09aa6cfcd8ab85a8f547bbc25081602e049fab8afa9de378b2ec7c5442

  • C:\Users\Admin\AppData\Local\Temp\{9D7066CC-55CE-4B29-A9C2-1DEC4693443A}\_Setup.dll

    Filesize

    17KB

    MD5

    cab17b21954073d31c8db02f056bd046

    SHA1

    89e3bed75478df8727aea2e48d8e2d652e21dbbd

    SHA256

    8dfbe5db0e1570f06ef0d2e495d6e930c793e0275b7392acb14ecf77c1d2243b

    SHA512

    4cd5495a34104fc7f8253672ed987bcf1d6a8dbb9d029ae1a556be9d8f4b1f9f0e1c6ad8d96c9b1cc5959ba41bac64f76af287a79175065a203fde5f64384c63