Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    134s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06/11/2022, 22:54

General

  • Target

    ac62e92d433ae6732d21d7c8a7ecf57763b77fd3728ccbe9d714564bb94d44e3.exe

  • Size

    318KB

  • MD5

    092b4742a6b2e82008fc4b246ae62258

  • SHA1

    1366bc2159ac2400574017936f5c50be5d42dae8

  • SHA256

    ac62e92d433ae6732d21d7c8a7ecf57763b77fd3728ccbe9d714564bb94d44e3

  • SHA512

    b7bf83d6478b94174bc7d1a69490f3b1a82a3b0a9bfcb1a1615b0769bcc24ea612d3cba1bd92ba4d8115316b4f887422f31fa6834305ed18c15c867aeefc16de

  • SSDEEP

    6144:mcvdH+yoIRx6frfkJu5bnH+CE9DhkztZklbT:7vdeyolsJu5bneCyytytT

Score
6/10

Malware Config

Signatures

  • Maps connected drives based on registry 3 TTPs 2 IoCs

    Disk information is often read in order to detect sandboxing environments.

  • Drops file in Windows directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ac62e92d433ae6732d21d7c8a7ecf57763b77fd3728ccbe9d714564bb94d44e3.exe
    "C:\Users\Admin\AppData\Local\Temp\ac62e92d433ae6732d21d7c8a7ecf57763b77fd3728ccbe9d714564bb94d44e3.exe"
    1⤵
    • Maps connected drives based on registry
    • Drops file in Windows directory
    PID:4852

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4852-132-0x00000000019F0000-0x0000000001A1F000-memory.dmp

    Filesize

    188KB

  • memory/4852-136-0x0000000004E80000-0x0000000004EA7000-memory.dmp

    Filesize

    156KB