Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    148s
  • max time network
    168s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06/12/2022, 07:20

General

  • Target

    cb2a5f2ac765d097dd3abc91bb060b12ce586ca52d72aa5a4f04ac93474cf2c5.exe

  • Size

    90KB

  • MD5

    a2b0fce6a400ca54aafd97d800dc3928

  • SHA1

    bae57d630ed8dfd4535d74307ac5b3acb8f28dd2

  • SHA256

    cb2a5f2ac765d097dd3abc91bb060b12ce586ca52d72aa5a4f04ac93474cf2c5

  • SHA512

    1a0b4b77ac53196b3bef3d20f25337e91de174868ac00268ec415c1a3d3244ab8dabff5a0d808670d17cdc1c009634ca8b85eef5af285b794ebcb06da5666d5b

  • SSDEEP

    1536:nQQ2aTmzPfYPpIGmMQ5qwsVHYDP2KaruZUp8gPLiDi9p4:nQQ2aS7u7XQ5qTx+P2KarJpxiG9p4

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\cb2a5f2ac765d097dd3abc91bb060b12ce586ca52d72aa5a4f04ac93474cf2c5.exe
    "C:\Users\Admin\AppData\Local\Temp\cb2a5f2ac765d097dd3abc91bb060b12ce586ca52d72aa5a4f04ac93474cf2c5.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2872
    • C:\Windows\SysWOW64\cmd.exe
      cmd.exe /c ""C:\Users\Admin\AppData\Local\Temp\287B50C.bat" "C:\Users\Admin\AppData\Local\Temp\cb2a5f2ac765d097dd3abc91bb060b12ce586ca52d72aa5a4f04ac93474cf2c5.exe""
      2⤵
        PID:632

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Temp\287B50C.bat

      Filesize

      1KB

      MD5

      439c79f581783d91d2f854033dd3acc3

      SHA1

      450bed02f1d677c8b5a9dcc8044cb00077f70c71

      SHA256

      cd9dc96b2ca332ece23e99b5b888d8daf0855f2ca23b286d8fe114c8a283c4cf

      SHA512

      7e6584db78c1c1800068cc981793381c959510f145503ac8b00087e707cf89264aa7e170ed8de04b9146a32e9e77e0d938ec2d6e431e5d38c7bae8b2dd04b5f7