Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    151s
  • max time network
    160s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27/11/2022, 06:53

General

  • Target

    c91f9cfb4d385b0427283d6cd8028ed4336a4a12928b60e3d9b276dad2ef8cb8.exe

  • Size

    220KB

  • MD5

    b01a47eb16d6943b8e6e801408e7ed95

  • SHA1

    a39f2d4db338e8635c82436b63a5a5d8ebff855f

  • SHA256

    c91f9cfb4d385b0427283d6cd8028ed4336a4a12928b60e3d9b276dad2ef8cb8

  • SHA512

    55a648acfd891cecc30da49fec3bcaa0015464d128c776c7d9300d44863d2c1aab31ab5621fade71aaf1b7dfe43c547a284d37f81944b5e09a543df2df86226c

  • SSDEEP

    1536:iCKDYCo5BMOClC9o4CVqJjDDDk1pw1OwrFNXvg6JAwAk8r3u6v:/2MaXAoVqJj3D+w1OwXvg6JAwAk8re6

Score
6/10

Malware Config

Signatures

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

Processes

  • C:\Users\Admin\AppData\Local\Temp\c91f9cfb4d385b0427283d6cd8028ed4336a4a12928b60e3d9b276dad2ef8cb8.exe
    "C:\Users\Admin\AppData\Local\Temp\c91f9cfb4d385b0427283d6cd8028ed4336a4a12928b60e3d9b276dad2ef8cb8.exe"
    1⤵
      PID:1548

    Network

    MITRE ATT&CK Enterprise v6

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1548-132-0x0000000000BC0000-0x0000000000BF9000-memory.dmp

      Filesize

      228KB

    • memory/1548-133-0x0000000000BC0000-0x0000000000BF9000-memory.dmp

      Filesize

      228KB

    • memory/1548-139-0x0000000000BC0000-0x0000000000BF9000-memory.dmp

      Filesize

      228KB

    • memory/1548-140-0x0000000000BC0000-0x0000000000BF9000-memory.dmp

      Filesize

      228KB