Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
50s -
max time network
63s -
platform
windows10-1703_x64 -
resource
win10-20220812-en -
resource tags
-
submitted
18/12/2022, 18:09
General
-
Target
f57bb4bd38f82867a733733f56b4928d1a238052c57e4d79e4ae8820fa8bc025.exe
-
Size
286KB
-
MD5
b7f39a03393393e9d4a6ba834c8c5c34
-
SHA1
dba7d9963fdc02cb5a2baf94fa51219c8ff9ea7a
-
SHA256
f57bb4bd38f82867a733733f56b4928d1a238052c57e4d79e4ae8820fa8bc025
-
SHA512
f5b700c81c101e5235d677ea6850de07da999c22df18abe33e35d9667ffed7d0f778d21da92d916e7cd247ea5e2b7f70ac8581e8a2e80e371dbddce1f789d201
-
SSDEEP
6144:ibvL3wnq0oBMih1i9tHL8AtDT2Uxjpw9l390mBOgmjcbXF:ibv7wnq0zihmRLbGUrA0mYgmYbXF
Malware Config
Signatures
-
Detect rhadamanthys stealer shellcode 2 IoCs
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Suspicious use of NtSetInformationThreadHideFromDebugger 3 IoCs
-
Program crash 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f57bb4bd38f82867a733733f56b4928d1a238052c57e4d79e4ae8820fa8bc025.exe"C:\Users\Admin\AppData\Local\Temp\f57bb4bd38f82867a733733f56b4928d1a238052c57e4d79e4ae8820fa8bc025.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1764 -s 6682⤵
- Program crash
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
140KB
-
Filesize
1.3MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
452KB
-
Filesize
1.6MB
-
Filesize
116KB
-
Filesize
1.6MB
-
Filesize
8KB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
140KB
-
Filesize
1.3MB
-
Filesize
140KB
-
Filesize
452KB
-
Filesize
116KB