Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
190s -
max time network
224s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
02/12/2022, 17:07
Static task
static1
Behavioral task
behavioral1
Sample
e3113b49ad428fc022f9ed3da66448ed274a4b095e55bb8d44ece07492bab4cf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e3113b49ad428fc022f9ed3da66448ed274a4b095e55bb8d44ece07492bab4cf.exe
Resource
win10v2004-20221111-en
General
-
Target
e3113b49ad428fc022f9ed3da66448ed274a4b095e55bb8d44ece07492bab4cf.exe
-
Size
1.7MB
-
MD5
0f0de1c1ff02832df4629065d3d50f2c
-
SHA1
f46cb51c52c070a4aa3b2cf8c1a67681de35def0
-
SHA256
e3113b49ad428fc022f9ed3da66448ed274a4b095e55bb8d44ece07492bab4cf
-
SHA512
e771a1013f4898d1ac80042f89f48142652b90892b06fa2a41b689d2b754b8aaf2caf1887e77c12d4222d013d9a88fa2de2b8a8accbed1d660d81d71e222e76f
-
SSDEEP
24576:OXdVtTj2i64T+jdxQCfgOFD3WSwd2QtBBw6xxhVxQtmibjOhZaiRu/4oMaop0UNe:mbTChxKCnFnQXBbrtgb/iQvu0UHOh
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 1836 e3113b49ad428fc022f9ed3da66448ed274a4b095e55bb8d44ece07492bab4cf.exe -
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 1836 e3113b49ad428fc022f9ed3da66448ed274a4b095e55bb8d44ece07492bab4cf.exe 1836 e3113b49ad428fc022f9ed3da66448ed274a4b095e55bb8d44ece07492bab4cf.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
388KB
MD58d7db101a7211fe3309dc4dc8cf2dd0a
SHA16c2781eadf53b3742d16dab2f164baf813f7ac85
SHA25693db7c9699594caa19490280842fbebec3877278c92128b92e63d75fcd01397a
SHA5128b139d447068519997f7bbc2c7c2fe3846b89ae1fba847258277c9ab92a93583b28fae7ffa444768929ed5852cc914c0270446cbf0bd20aca49bde6b6f809c83