Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    146s
  • max time network
    139s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01/12/2022, 09:05

General

  • Target

    cd3ad434974788c8baad4f275f63dffe533d322e67d1024179088e267aabefe8.exe

  • Size

    863KB

  • MD5

    3b381613b645c2d738e6cff552717ca8

  • SHA1

    07cd96754a88dc388b1ccf2b623dda3bb88bc913

  • SHA256

    cd3ad434974788c8baad4f275f63dffe533d322e67d1024179088e267aabefe8

  • SHA512

    ecf87223095ed3d2e39dea7bd9a27ac1e1817526a85c6966335d6eb187f4ccc5c64d938c6cb1b0d48f3439b869ade9aeb0209fc83f142043e1bb6496741f21c0

  • SSDEEP

    12288:F1bL4I5RveDSHGv2NbQWWGihFi6QMppiJmTFPuYNCut+UmlEVtoinx7Vdv:F1bB1eD3MbQWWGAUMuJ0F3rVTx7rv

Score
10/10

Malware Config

Signatures

  • Modifies WinLogon for persistence 2 TTPs 1 IoCs
  • Drops file in System32 directory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\cd3ad434974788c8baad4f275f63dffe533d322e67d1024179088e267aabefe8.exe
    "C:\Users\Admin\AppData\Local\Temp\cd3ad434974788c8baad4f275f63dffe533d322e67d1024179088e267aabefe8.exe"
    1⤵
    • Modifies WinLogon for persistence
    • Drops file in System32 directory
    PID:1616

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads