Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    157s
  • max time network
    176s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06/11/2022, 07:30

General

  • Target

    c4fbde37fb981eb738b0e14ab3c5bfb6595a4819fff6876504c890ff0151723e.exe

  • Size

    637KB

  • MD5

    3340a839cd9d72db118ec914576d0bf0

  • SHA1

    5926e049d0b6b10208a26f6dd6c96ac1c165c5c0

  • SHA256

    c4fbde37fb981eb738b0e14ab3c5bfb6595a4819fff6876504c890ff0151723e

  • SHA512

    d0fd713ef535e1c78ef4e6bf7053a427760c1eb81746491200b5e20ff8ee6cf1c9f25bc889a9527b190f13b0d2cf2df0a64ac712a003362befbe0d75de101d70

  • SSDEEP

    6144:98q0eDYMKxgbK/d51EKN7WYlSVewZad8ZhAHgf1YzNowu31cBsdg/FVN2YFMjKQM:L0eDkP51KY0rA8ZfCziwEgsYloNwtVT

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c4fbde37fb981eb738b0e14ab3c5bfb6595a4819fff6876504c890ff0151723e.exe
    "C:\Users\Admin\AppData\Local\Temp\c4fbde37fb981eb738b0e14ab3c5bfb6595a4819fff6876504c890ff0151723e.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:3408

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3408-132-0x0000000000400000-0x000000000046D000-memory.dmp

    Filesize

    436KB

  • memory/3408-134-0x0000000000467000-0x000000000046A000-memory.dmp

    Filesize

    12KB

  • memory/3408-135-0x000000000046A000-0x000000000046D000-memory.dmp

    Filesize

    12KB

  • memory/3408-136-0x0000000000400000-0x00000000004A3000-memory.dmp

    Filesize

    652KB

  • memory/3408-137-0x0000000000400000-0x000000000046D000-memory.dmp

    Filesize

    436KB