Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    147s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    31/10/2022, 01:15

General

  • Target

    a13df00e182f065362d467a06dba76e405a05b25a2588b63f5df542378390c7f.exe

  • Size

    309KB

  • MD5

    911a32272ade56635fff89107eba6b50

  • SHA1

    bda61fb60580a8d85e9686fe70f315a870a095bb

  • SHA256

    a13df00e182f065362d467a06dba76e405a05b25a2588b63f5df542378390c7f

  • SHA512

    b0cd0458d918be27931b4d04ede3ba6fb93a33d6b6f021c3fa9f0c424ccd5a829039b0fd8b41543ccefdc275efb851a12db4a42496865c13ffbb2f41291afee3

  • SSDEEP

    6144:or+8I5RxWBDg7V0eXze6OvA48E4XGvriXOkrta2my9xVtGmJmvY8eTazdbP:or+8I3sBDJejgPIXGvmXOL2my9xVYrvT

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\a13df00e182f065362d467a06dba76e405a05b25a2588b63f5df542378390c7f.exe
    "C:\Users\Admin\AppData\Local\Temp\a13df00e182f065362d467a06dba76e405a05b25a2588b63f5df542378390c7f.exe"
    1⤵
    • Loads dropped DLL
    PID:2492

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\Tsu4917D32B.dll

    Filesize

    269KB

    MD5

    73f84010494b1b9e4b478790bbd3d71a

    SHA1

    136f73ff2ccb0ca4a558f7b72f8d9641bf7ee7f0

    SHA256

    41a58310d5c51c6dea425a4dd7e79c7dea67be75915512990ac263ff8f6e02a0

    SHA512

    e57eddfb249597151e09c4aebd9d2d77239ce677cd47d944202ed2a2a68af042c7b0a9725c366414300647d11c3bdafe3f163c065b8b6c89efa56fc764ac2966

  • C:\Users\Admin\AppData\Local\Temp\{723A4925-5585-48F7-AA1C-1DA7A9D96BD3}\Custom.dll

    Filesize

    58KB

    MD5

    6fcfbc96bf5f5e265de9f2562449889c

    SHA1

    0c1554b206a19d8493f4c527a59d3e5294e2f333

    SHA256

    383fac28159ba8589047985f7cfbbf3496f9d7f2088f8faffefd11c1dabdb5f6

    SHA512

    1309dc0b701849509ad69cca80c5d054624fa212efd4bffa6e517328365d3695421c51d43e966e8a9199644a07eb6f13cb023f7d9b6e7cff4f9936cb18ef6f9b

  • C:\Users\Admin\AppData\Local\Temp\{723A4925-5585-48F7-AA1C-1DA7A9D96BD3}\_Setup.dll

    Filesize

    208KB

    MD5

    b4dc5b89107d623135978726b2004c3f

    SHA1

    3d82e345bdfc52755fbab38c6f2ce31eb37ea4bb

    SHA256

    5a98d4b7c1812eacd0db99afd76b3d0496ce790390e2c4c76517bfb93432551e

    SHA512

    1e3b6f8e869c53c34965ab0cacbf2c1ac0efd1bea7fe14a147439abf0687fc0eab0d9581964be6215bf4a964d47b8d2365256a55386c0e89615079317096f651