Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    90s
  • max time network
    107s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28/11/2022, 04:05 UTC

General

  • Target

    c38d4496882c4b7fd352983494a317f1eb220ca0ecfb456a8c10392cddc85075.exe

  • Size

    156KB

  • MD5

    cf0efe4987e4eba81d6af166ece79aa1

  • SHA1

    0d01b9150c44f844d3c3972f64f4b75f264f7506

  • SHA256

    c38d4496882c4b7fd352983494a317f1eb220ca0ecfb456a8c10392cddc85075

  • SHA512

    9d2fa1ce066a2904aa23080c9eb9195d2c69455ce77b7f8939fb35edf5afa687cd5a69f855b642445cc672c9e089d309b0433b6731114f3da85de7fdc5c66344

  • SSDEEP

    3072:yxTqpdA3f6QNf2IPO4DpmWpAsfYbTOBoefYi6a9k20tAvnkzkuI8:02pdqfv2IPOGfXf5ovWvakk

Score
8/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Drops file in Windows directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c38d4496882c4b7fd352983494a317f1eb220ca0ecfb456a8c10392cddc85075.exe
    "C:\Users\Admin\AppData\Local\Temp\c38d4496882c4b7fd352983494a317f1eb220ca0ecfb456a8c10392cddc85075.exe"
    1⤵
    • Drops file in Windows directory
    PID:4848

Network

    No results found
  • 20.189.173.12:443
    322 B
    7
  • 8.238.21.254:80
    322 B
    7
  • 8.238.21.254:80
    322 B
    7
  • 8.238.21.254:80
    322 B
    7
No results found

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4848-132-0x0000000000400000-0x0000000000428000-memory.dmp

    Filesize

    160KB

  • memory/4848-133-0x0000000000400000-0x0000000000428000-memory.dmp

    Filesize

    160KB

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.