Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    138s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04/12/2022, 02:55

General

  • Target

    94baa43beb62ffaaedef6551770c5c68287fe51e4f35a106efca38190e3e94fa.exe

  • Size

    472KB

  • MD5

    17277b2463783f3b7953af33bc7b6b3e

  • SHA1

    8553d26ede23578d2debf60e149316aed45cad68

  • SHA256

    94baa43beb62ffaaedef6551770c5c68287fe51e4f35a106efca38190e3e94fa

  • SHA512

    e76710b96620a8028059a5fee46f67e287bcd56a58b515ab10dc42c852e7a856d80df3c4e879b7a916d4a5cbaa2a31a0703d2b7153ee2a913814f7702dc9955e

  • SSDEEP

    3072:WtpC8AwLefk/9+oZSTpdW1UKezpATNX2lmhjsxFZOZ27Z7YV9E6+sWBMV1Skq+A7:0EAF3GdW1vC28Us6+dkLMMqLhSDM5I0

Score
6/10

Malware Config

Signatures

  • Enumerates connected drives 3 TTPs 24 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in Windows directory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\94baa43beb62ffaaedef6551770c5c68287fe51e4f35a106efca38190e3e94fa.exe
    "C:\Users\Admin\AppData\Local\Temp\94baa43beb62ffaaedef6551770c5c68287fe51e4f35a106efca38190e3e94fa.exe"
    1⤵
    • Enumerates connected drives
    • Drops file in Windows directory
    PID:4964

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads