Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

834cbf2dc0...a8.exe

windows7-x64

8

834cbf2dc0...a8.exe

windows10-2004-x64

8

Analysis

  • max time kernel
    105s
  • max time network
    110s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30/10/2022, 14:24

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    834cbf2dc0af272b5b79ea08ad89d9df29c6d9e68c3a2bc5c99efc93cdb1c9a8.exe

  • Size

    652KB

  • MD5

    a3315e6298e453ab3dfeaef056f4c6e0

  • SHA1

    5b588a4e3cb9e65446d852ccd6fd7549ee72b282

  • SHA256

    834cbf2dc0af272b5b79ea08ad89d9df29c6d9e68c3a2bc5c99efc93cdb1c9a8

  • SHA512

    b69c571505a57328ab3ab745183106602f37fd92804ffdf089f70cbfd9549bb03124ce09a6d5d9c617462c08f5118e76ac4de07a2f012d61c774ade445f5f2c6

  • SSDEEP

    6144:s4UHFnuDk67fe2GzqOxLfPcvgKVPlw9ayXlw9ayK18CRRVMMMMMM2MMMMMs:6luDk67Sz3zKQeW1zRRaMMMMM2MMMMMs

Score
8/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Drops file in Windows directory 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Windows\Explorer.EXE
    C:\Windows\Explorer.EXE
    1⤵
      PID:652
      • C:\Users\Admin\AppData\Local\Temp\834cbf2dc0af272b5b79ea08ad89d9df29c6d9e68c3a2bc5c99efc93cdb1c9a8.exe
        "C:\Users\Admin\AppData\Local\Temp\834cbf2dc0af272b5b79ea08ad89d9df29c6d9e68c3a2bc5c99efc93cdb1c9a8.exe"
        2⤵
        • Drops file in Windows directory
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of WriteProcessMemory
        PID:636
        • C:\Users\Admin\AppData\Local\Temp\834cbf2dc0af272b5b79ea08ad89d9df29c6d9e68c3a2bc5c99efc93cdb1c9a8.com
          C:\Users\Admin\AppData\Local\Temp\834cbf2dc0af272b5b79ea08ad89d9df29c6d9e68c3a2bc5c99efc93cdb1c9a8.com
          3⤵
          • Executes dropped EXE
          PID:220

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Temp\834cbf2dc0af272b5b79ea08ad89d9df29c6d9e68c3a2bc5c99efc93cdb1c9a8.com
      Filesize

      564KB

      MD5

      6bef9ef5cea86e912afc3f4503f72242

      SHA1

      1af88ef3b8d83931c6e996f7a55dd0ae0882b6ca

      SHA256

      7d15d0205084f0c89baf56beec70d7a47bb69f1e4e38f3797d3e68106a56c2b9

      SHA512

      508bf048f83e9fab3b860582d64f1b7f271c3ffec5218c748cebd3d413f511d147f475bdd5ebe299d8b5db915e52f02c17a8a51d0c0db24e4bae9445bd2a24de

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\834cbf2dc0af272b5b79ea08ad89d9df29c6d9e68c3a2bc5c99efc93cdb1c9a8.com
      Filesize

      564KB

      MD5

      6bef9ef5cea86e912afc3f4503f72242

      SHA1

      1af88ef3b8d83931c6e996f7a55dd0ae0882b6ca

      SHA256

      7d15d0205084f0c89baf56beec70d7a47bb69f1e4e38f3797d3e68106a56c2b9

      SHA512

      508bf048f83e9fab3b860582d64f1b7f271c3ffec5218c748cebd3d413f511d147f475bdd5ebe299d8b5db915e52f02c17a8a51d0c0db24e4bae9445bd2a24de

      Download Submit