Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

cf9cd6a6b4...f2.exe

windows7-x64

8

cf9cd6a6b4...f2.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    361s
  • max time network
    366s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27/11/2022, 20:50

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    cf9cd6a6b483d7006af6dc8ac5ae2fbd69a0d70f22fcbc9d8a2e241ba4f26df2.exe

  • Size

    5.8MB

  • MD5

    d8f133f6ac989889d64decd864fe803e

  • SHA1

    79b3068e05a48a197cd4f8a37a9e33ab087e5875

  • SHA256

    cf9cd6a6b483d7006af6dc8ac5ae2fbd69a0d70f22fcbc9d8a2e241ba4f26df2

  • SHA512

    d5b64848d7194154f08f72d96f4d40cc8e193e3804d2ffb2c7ce079a5084c6534f61ca9352392314b34efcf21318e03ed9479f33e88306526347c4703bd6fd1c

  • SSDEEP

    98304:nFastLdG1V67xuqI+cprrXTUJ7S54zlyNnA9GjfunztH9Cq8G197QdJpJMr2Pv:nFaMpyI74l+cpjgJS5a4NnxfuR4qzurF

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\cf9cd6a6b483d7006af6dc8ac5ae2fbd69a0d70f22fcbc9d8a2e241ba4f26df2.exe
    "C:\Users\Admin\AppData\Local\Temp\cf9cd6a6b483d7006af6dc8ac5ae2fbd69a0d70f22fcbc9d8a2e241ba4f26df2.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: EnumeratesProcesses
    PID:3748

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\tf00294823.dll
    Filesize

    3.9MB

    MD5

    5a553d9519346659b12036b1c7f76256

    SHA1

    3f35c278acf7407d3f7a2a0b98ad9925ca6b2fdc

    SHA256

    b5e3bed35563d047e25abd77f00c57c93e5bd65bab59d025d3cb4ce28c8dbd07

    SHA512

    3985bbee5a77fe41b6361fedf2d20a4ecaa29eab9d795f460a2c43a681a51bedf5d3d7f3af6b173061f76be3cc5074028d38f7319ba8d878a7b36e60f88e087d

    Download Submit

  • memory/3748-132-0x000000007F4A0000-0x000000007F97E000-memory.dmp

    Filesize

    4.9MB

    Download

  • memory/3748-138-0x000000007F010000-0x000000007F356000-memory.dmp

    Filesize

    3.3MB

    Download