Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    148s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03/12/2022, 11:09

General

  • Target

    c5f6a13df2fa54c0b9ea0cbb3af832fe7e7cea4fef6e7b523877768955350935.exe

  • Size

    57KB

  • MD5

    172f8f458b8590b2eb430b6e33fd23d0

  • SHA1

    2cd000a7c7843858733675f4980d4f711023e158

  • SHA256

    c5f6a13df2fa54c0b9ea0cbb3af832fe7e7cea4fef6e7b523877768955350935

  • SHA512

    8d67f3d163860c382e91b290622f362b88c2587e6e60acfd95546276b07b32e77817b9934b4bf0dcdc7ebe10e28a095dcc3bad9ad7ac340de33d7f5f523e21b4

  • SSDEEP

    1536:mUuXeVMdMikFVhxp2EK5X96Mb1kHSNlL0:mUuXeVMf1NJ1kHmo

Score
5/10

Malware Config

Signatures

  • Drops file in System32 directory 4 IoCs
  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies data under HKEY_USERS 8 IoCs
  • Suspicious behavior: RenamesItself 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c5f6a13df2fa54c0b9ea0cbb3af832fe7e7cea4fef6e7b523877768955350935.exe
    "C:\Users\Admin\AppData\Local\Temp\c5f6a13df2fa54c0b9ea0cbb3af832fe7e7cea4fef6e7b523877768955350935.exe"
    1⤵
    • Drops file in System32 directory
    • Suspicious behavior: RenamesItself
    • Suspicious use of SetWindowsHookEx
    PID:1272
  • C:\Windows\SysWOW64\explorer.exe
    C:\Windows\SysWOW64\explorer.exe
    1⤵
    • Drops file in System32 directory
    • Checks processor information in registry
    • Modifies data under HKEY_USERS
    PID:1404
  • C:\Windows\explorer.exe
    C:\Windows\explorer.exe /factory,{682159d9-c321-47ca-b3f1-30e36b2ec8b9} -Embedding
    1⤵
      PID:1668

    Network

    MITRE ATT&CK Enterprise v6

    Replay Monitor

    Loading Replay Monitor...

    Downloads