Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
287s -
max time network
315s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
05/12/2022, 21:39
General
-
Target
893138a26b258e2544a400692b58b5c099a3c89f754b7b3a29f750f9f6a59107.exe
-
Size
56KB
-
MD5
5477f0e55c7c9ec96b18d0fcdb15dacc
-
SHA1
1f0b1470c739d90fb1ba3629217026b9e5c6c596
-
SHA256
893138a26b258e2544a400692b58b5c099a3c89f754b7b3a29f750f9f6a59107
-
SHA512
c837cbab7c15d1218c2989e7366ddfb340bdbba645558baeb02db440387b97fcc8cd4cd85a9133999cd5dff637c7854b90367b8a5beb4da6face6dd82e63cfde
-
SSDEEP
768:wEFZQKr4cKusy/NKQf4ELwCru5WcZjmoOfNdQJpdE:wEXEeNKjELwhlj6Q7d
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Windows\Explorer.EXEC:\Windows\Explorer.EXE1⤵
-
C:\Users\Admin\AppData\Local\Temp\893138a26b258e2544a400692b58b5c099a3c89f754b7b3a29f750f9f6a59107.exe"C:\Users\Admin\AppData\Local\Temp\893138a26b258e2544a400692b58b5c099a3c89f754b7b3a29f750f9f6a59107.exe"2⤵
- Loads dropped DLL
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
9KB
MD50adb6f82125d3cb830a532da154677f0
SHA1b1abad527ee1ed71bd4f00e1bb01214185398efb
SHA2563449618ca5da3813402d38b8890462af1c90d8a991583e4c0492c3a81b60f425
SHA512199060e350c1101f138d6b2151fc465e930eed495af77aaeaab837b10ca6d1fc113e32be51b5abe9b9d6c00dc73edf2d80ce720e99aabb8cd60ceae458c640fc
-
Filesize
60KB
-
Filesize
60KB
-
Filesize
16KB