Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
305s -
max time network
339s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
01/12/2022, 16:02
General
-
Target
bb31a8542758478f0b80f2a0358b0e14911303dee9eed7639758544e32fe6d64.exe
-
Size
1.1MB
-
MD5
d0f6bffad90d8f710b10b5d185405346
-
SHA1
58807c5d0fa41b901312162f32d23dbe22bb5042
-
SHA256
bb31a8542758478f0b80f2a0358b0e14911303dee9eed7639758544e32fe6d64
-
SHA512
6142e6ec6ab302a117f9741cd5a209c320c7883b01bc44bc703e49fe2d7d8ee2c84f78aa0d0439159c8bb2edb39202d36550b0788163e61a2b1592d2fcbab53c
-
SSDEEP
24576:14YonYXlOoGeiTQcpe0RBYZ1ZcCT8hVTtegLJ1HQhqRlwRKsk7SyUE:2YOYXbiTQ0+11T8hhMFk79UE
Score
7/10
Malware Config
Signatures
-
Checks BIOS information in registry 2 TTPs 1 IoCs
BIOS information is often read in order to detect sandboxing environments.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious behavior: LoadsDriver 2 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\bb31a8542758478f0b80f2a0358b0e14911303dee9eed7639758544e32fe6d64.exe"C:\Users\Admin\AppData\Local\Temp\bb31a8542758478f0b80f2a0358b0e14911303dee9eed7639758544e32fe6d64.exe"1⤵
- Checks BIOS information in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB