Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
186s -
max time network
192s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
06/12/2022, 08:34
General
-
Target
af4a0db05a6ee60b7997fd7b564c1f1763ff1644413ffd82db42a372aad18bc8.exe
-
Size
133KB
-
MD5
9da44a7a45a956a9e9ec2d1e247ffc7c
-
SHA1
de6daf86f1f40063913c0fb3a3db1ac845b59304
-
SHA256
af4a0db05a6ee60b7997fd7b564c1f1763ff1644413ffd82db42a372aad18bc8
-
SHA512
540c3dec683ad3c467d3f2957b4b10d9ff6380a26d95710eed7a4fc2c99be68279efa6306f2d1b8ab83dccefa593980f0f42f32e27723b36bc8ec5323f34f4cb
-
SSDEEP
3072:TV3poEbTPpmjADAifphYSoA0GbhbhiLqiUDc/R:dPskzDY5A0GbviLq/DC
Score
8/10
Malware Config
Signatures
-
UPX packed file 5 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\af4a0db05a6ee60b7997fd7b564c1f1763ff1644413ffd82db42a372aad18bc8.exe"C:\Users\Admin\AppData\Local\Temp\af4a0db05a6ee60b7997fd7b564c1f1763ff1644413ffd82db42a372aad18bc8.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\af4a0db05a6ee60b7997fd7b564c1f1763ff1644413ffd82db42a372aad18bc8.exe?2⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
156KB
-
Filesize
60KB
-
Filesize
60KB
-
Filesize
60KB
-
Filesize
156KB
-
Filesize
60KB
-
Filesize
60KB