Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    178s
  • max time network
    188s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28/11/2022, 05:32

General

  • Target

    450a56e54cb7e43c2b1d9ba7da053d5133fbaf9c81c02708bef136a64a177401.exe

  • Size

    973KB

  • MD5

    9505554ec9feecde51ecf1eff2605fe8

  • SHA1

    112909ef2b1d6c4dcb1396937c7976c348a936eb

  • SHA256

    450a56e54cb7e43c2b1d9ba7da053d5133fbaf9c81c02708bef136a64a177401

  • SHA512

    7ef06e971316ebe38ccc164983eb8a2185b393cb19220c84ed05807eb2017ce3ab8acb65860cfc655ea1e6d649631b6a78e0367786a8bc4a62f766aabca30ff2

  • SSDEEP

    24576:K+wU+0GRJBMyaosJdRnPUKGh6qltQpoRGbkZMA0uSrrS7wH5:IR0GRJ5RsBPUKGhtQugkZOma5

Score
7/10

Malware Config

Signatures

  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\450a56e54cb7e43c2b1d9ba7da053d5133fbaf9c81c02708bef136a64a177401.exe
    "C:\Users\Admin\AppData\Local\Temp\450a56e54cb7e43c2b1d9ba7da053d5133fbaf9c81c02708bef136a64a177401.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:2640

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads