Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    151s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30/10/2022, 15:58

General

  • Target

    510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe

  • Size

    60KB

  • MD5

    82ad3f011371238a88c9235420362211

  • SHA1

    922ed87e0b888794b23899112e15f6d180ff545b

  • SHA256

    510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718

  • SHA512

    7a326a66a262b1d79e6c645559bf4621f4648c213f3231e443ddcf2279c6f6baadf5452f0cc93cfa71644f9cf405e6d6521fd984c1ca5aeef969c33501025449

  • SSDEEP

    1536:YJkK+YAhLTdlG4q8bo4bOm2Ll/F2b3yryUY:YJkTY+lG4qeXbYLv2byY

Score
6/10

Malware Config

Signatures

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Suspicious behavior: EnumeratesProcesses 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe
    "C:\Users\Admin\AppData\Local\Temp\510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:4884

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4884-132-0x0000000000760000-0x0000000000765000-memory.dmp

    Filesize

    20KB

  • memory/4884-133-0x0000000000400000-0x0000000000410000-memory.dmp

    Filesize

    64KB

  • memory/4884-134-0x0000000000760000-0x0000000000765000-memory.dmp

    Filesize

    20KB