Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    201s
  • max time network
    209s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23/11/2022, 19:17

General

  • Target

    48f5ee859f09d856d7701094a581da337a769b376250f1177af67245af1b0fe4.exe

  • Size

    995KB

  • MD5

    269682207d734b9ca08047387881c5a3

  • SHA1

    c2db82d8503c4cbd261be3260a2d0827922dd45f

  • SHA256

    48f5ee859f09d856d7701094a581da337a769b376250f1177af67245af1b0fe4

  • SHA512

    49b5f144792831f66daf5e5242a6ca5f1bf42ebc78c0f86f2d8ac1723d354e3cfa07ad9e7ef23d62226621a4d1c63064ce635d6689fdab910b2ea3ca8925e271

  • SSDEEP

    24576:r1H9/GufhR/bAw+u7V8dSi8D/mTJFjG9ZrVggcZDZs/u:rl9/G2z+ueMbmdF8tcj1

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Drops file in System32 directory 2 IoCs
  • Drops file in Windows directory 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\48f5ee859f09d856d7701094a581da337a769b376250f1177af67245af1b0fe4.exe
    "C:\Users\Admin\AppData\Local\Temp\48f5ee859f09d856d7701094a581da337a769b376250f1177af67245af1b0fe4.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in System32 directory
    • Drops file in Windows directory
    • Suspicious use of SetWindowsHookEx
    PID:3228

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Windows\SysWOW64\wmdrtc32.dll

    Filesize

    40KB

    MD5

    03ebc053c8eec6b4f4afbbb5dc64b169

    SHA1

    9ed172dbce1a6a1dd20e08a9720afba210eee79c

    SHA256

    ad25714f5c7eb2e27742b5e0886e865fc8884e8b65cb863d2aeba0c6dbff2d02

    SHA512

    40eab99574ea6614341b869239b014a74cdc24da0c4be69681eaab18de72bbef14ad4cf36215e39eff4978b8ed074762ce25bb85a042219ac5db5cb46390e9ff

  • memory/3228-132-0x0000000000400000-0x00000000005EA000-memory.dmp

    Filesize

    1.9MB

  • memory/3228-134-0x0000000010000000-0x0000000010015000-memory.dmp

    Filesize

    84KB

  • memory/3228-135-0x0000000002A70000-0x0000000002ACA000-memory.dmp

    Filesize

    360KB

  • memory/3228-136-0x0000000000400000-0x00000000005EA000-memory.dmp

    Filesize

    1.9MB

  • memory/3228-137-0x0000000010000000-0x0000000010015000-memory.dmp

    Filesize

    84KB