Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    1563s
  • max time network
    1822s
  • platform
    windows10-1703_x64
  • resource
    win10-20220812-es
  • resource tags

    arch:x64arch:x86image:win10-20220812-eslocale:es-esos:windows10-1703-x64systemwindows
  • submitted
    15/02/2023, 04:45

General

  • Target

    AutoPlay/Docs/setup.exe

  • Size

    711KB

  • MD5

    a4318d6bde23314f8dc6c28688cf1396

  • SHA1

    2b4ad23828c7b7affee4b3d287c4df781531f728

  • SHA256

    21e3837855917e831e262ceee2dd7728bcb595e9a625f98056fa9782d00bf9dd

  • SHA512

    3f98214c53fa4d8d73a60ded0dc481e5b420391b10d832c6302a487356c3fc52e69a6f7f125c485dcf8b5ef760c92949e22619551481628a05507a17c460aadd

  • SSDEEP

    12288:iQiGXtG128pzy9AHCcsxiy/MZ4HzKDNvOvb+SYEhrVK57r9nSd5YjNPjalQZ:iQi6G12CziznhmRDVOvbTLrK5lAYTZ

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\AutoPlay\Docs\setup.exe
    "C:\Users\Admin\AppData\Local\Temp\AutoPlay\Docs\setup.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4500
    • C:\Users\Admin\AppData\Local\Temp\is-QTF6K.tmp\setup.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-QTF6K.tmp\setup.tmp" /SL5="$8002E,131584,0,C:\Users\Admin\AppData\Local\Temp\AutoPlay\Docs\setup.exe"
      2⤵
      • Executes dropped EXE
      PID:4600

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\is-QTF6K.tmp\setup.tmp

    Filesize

    763KB

    MD5

    4c194c4d71d4bd4e9b6a46a5062f94c5

    SHA1

    5c164db67fb3d3a7277567a66910a51eaeafc991

    SHA256

    0f5068b9615f40f119fdbf5f35c06c05f5907ba7500964ddf07ee3def9df8fa1

    SHA512

    83d4121005a64583bddb366bf5c494ecf0a3c882391432c9e28ffcaa95ed2131adf05c7749c578fa71852d82689f90a52a9ce44ce738e606b461239fd95cdaa5

  • C:\Users\Admin\AppData\Local\Temp\is-QTF6K.tmp\setup.tmp

    Filesize

    763KB

    MD5

    4c194c4d71d4bd4e9b6a46a5062f94c5

    SHA1

    5c164db67fb3d3a7277567a66910a51eaeafc991

    SHA256

    0f5068b9615f40f119fdbf5f35c06c05f5907ba7500964ddf07ee3def9df8fa1

    SHA512

    83d4121005a64583bddb366bf5c494ecf0a3c882391432c9e28ffcaa95ed2131adf05c7749c578fa71852d82689f90a52a9ce44ce738e606b461239fd95cdaa5

  • memory/4500-116-0x0000000077410000-0x000000007759E000-memory.dmp

    Filesize

    1.6MB

  • memory/4500-117-0x0000000077410000-0x000000007759E000-memory.dmp

    Filesize

    1.6MB

  • memory/4500-118-0x0000000077410000-0x000000007759E000-memory.dmp

    Filesize

    1.6MB

  • memory/4500-119-0x0000000077410000-0x000000007759E000-memory.dmp

    Filesize

    1.6MB

  • memory/4500-120-0x0000000077410000-0x000000007759E000-memory.dmp

    Filesize

    1.6MB

  • memory/4500-121-0x0000000077410000-0x000000007759E000-memory.dmp

    Filesize

    1.6MB

  • memory/4500-122-0x0000000077410000-0x000000007759E000-memory.dmp

    Filesize

    1.6MB

  • memory/4500-123-0x0000000077410000-0x000000007759E000-memory.dmp

    Filesize

    1.6MB

  • memory/4500-124-0x0000000077410000-0x000000007759E000-memory.dmp

    Filesize

    1.6MB

  • memory/4500-125-0x0000000077410000-0x000000007759E000-memory.dmp

    Filesize

    1.6MB

  • memory/4500-126-0x0000000077410000-0x000000007759E000-memory.dmp

    Filesize

    1.6MB

  • memory/4500-127-0x0000000077410000-0x000000007759E000-memory.dmp

    Filesize

    1.6MB

  • memory/4500-128-0x0000000077410000-0x000000007759E000-memory.dmp

    Filesize

    1.6MB

  • memory/4500-129-0x0000000077410000-0x000000007759E000-memory.dmp

    Filesize

    1.6MB

  • memory/4500-130-0x0000000077410000-0x000000007759E000-memory.dmp

    Filesize

    1.6MB

  • memory/4500-131-0x0000000077410000-0x000000007759E000-memory.dmp

    Filesize

    1.6MB

  • memory/4500-132-0x0000000077410000-0x000000007759E000-memory.dmp

    Filesize

    1.6MB

  • memory/4500-133-0x0000000077410000-0x000000007759E000-memory.dmp

    Filesize

    1.6MB

  • memory/4500-134-0x0000000077410000-0x000000007759E000-memory.dmp

    Filesize

    1.6MB

  • memory/4500-136-0x0000000077410000-0x000000007759E000-memory.dmp

    Filesize

    1.6MB

  • memory/4500-137-0x0000000077410000-0x000000007759E000-memory.dmp

    Filesize

    1.6MB

  • memory/4500-138-0x0000000077410000-0x000000007759E000-memory.dmp

    Filesize

    1.6MB

  • memory/4500-139-0x0000000077410000-0x000000007759E000-memory.dmp

    Filesize

    1.6MB

  • memory/4500-141-0x0000000077410000-0x000000007759E000-memory.dmp

    Filesize

    1.6MB

  • memory/4500-142-0x0000000077410000-0x000000007759E000-memory.dmp

    Filesize

    1.6MB

  • memory/4500-144-0x0000000077410000-0x000000007759E000-memory.dmp

    Filesize

    1.6MB

  • memory/4500-145-0x0000000077410000-0x000000007759E000-memory.dmp

    Filesize

    1.6MB

  • memory/4500-147-0x0000000077410000-0x000000007759E000-memory.dmp

    Filesize

    1.6MB

  • memory/4500-149-0x0000000077410000-0x000000007759E000-memory.dmp

    Filesize

    1.6MB

  • memory/4500-151-0x0000000077410000-0x000000007759E000-memory.dmp

    Filesize

    1.6MB

  • memory/4500-153-0x0000000077410000-0x000000007759E000-memory.dmp

    Filesize

    1.6MB

  • memory/4500-154-0x0000000077410000-0x000000007759E000-memory.dmp

    Filesize

    1.6MB

  • memory/4500-156-0x0000000077410000-0x000000007759E000-memory.dmp

    Filesize

    1.6MB

  • memory/4500-157-0x0000000077410000-0x000000007759E000-memory.dmp

    Filesize

    1.6MB

  • memory/4500-160-0x0000000077410000-0x000000007759E000-memory.dmp

    Filesize

    1.6MB

  • memory/4500-161-0x0000000077410000-0x000000007759E000-memory.dmp

    Filesize

    1.6MB

  • memory/4500-162-0x0000000077410000-0x000000007759E000-memory.dmp

    Filesize

    1.6MB

  • memory/4500-159-0x0000000077410000-0x000000007759E000-memory.dmp

    Filesize

    1.6MB

  • memory/4500-158-0x0000000077410000-0x000000007759E000-memory.dmp

    Filesize

    1.6MB

  • memory/4500-155-0x0000000077410000-0x000000007759E000-memory.dmp

    Filesize

    1.6MB

  • memory/4500-152-0x0000000077410000-0x000000007759E000-memory.dmp

    Filesize

    1.6MB

  • memory/4500-150-0x0000000077410000-0x000000007759E000-memory.dmp

    Filesize

    1.6MB

  • memory/4500-148-0x0000000077410000-0x000000007759E000-memory.dmp

    Filesize

    1.6MB

  • memory/4500-146-0x0000000077410000-0x000000007759E000-memory.dmp

    Filesize

    1.6MB

  • memory/4500-143-0x0000000077410000-0x000000007759E000-memory.dmp

    Filesize

    1.6MB

  • memory/4500-140-0x0000000077410000-0x000000007759E000-memory.dmp

    Filesize

    1.6MB

  • memory/4500-135-0x0000000077410000-0x000000007759E000-memory.dmp

    Filesize

    1.6MB

  • memory/4500-163-0x0000000077410000-0x000000007759E000-memory.dmp

    Filesize

    1.6MB

  • memory/4500-164-0x0000000000400000-0x0000000000426000-memory.dmp

    Filesize

    152KB

  • memory/4500-166-0x0000000077410000-0x000000007759E000-memory.dmp

    Filesize

    1.6MB

  • memory/4500-174-0x0000000000400000-0x0000000000426000-memory.dmp

    Filesize

    152KB

  • memory/4500-217-0x0000000000400000-0x0000000000426000-memory.dmp

    Filesize

    152KB

  • memory/4600-169-0x0000000077410000-0x000000007759E000-memory.dmp

    Filesize

    1.6MB

  • memory/4600-170-0x0000000077410000-0x000000007759E000-memory.dmp

    Filesize

    1.6MB

  • memory/4600-172-0x0000000077410000-0x000000007759E000-memory.dmp

    Filesize

    1.6MB

  • memory/4600-171-0x0000000077410000-0x000000007759E000-memory.dmp

    Filesize

    1.6MB

  • memory/4600-173-0x0000000077410000-0x000000007759E000-memory.dmp

    Filesize

    1.6MB

  • memory/4600-175-0x0000000077410000-0x000000007759E000-memory.dmp

    Filesize

    1.6MB

  • memory/4600-176-0x0000000077410000-0x000000007759E000-memory.dmp

    Filesize

    1.6MB

  • memory/4600-178-0x0000000077410000-0x000000007759E000-memory.dmp

    Filesize

    1.6MB

  • memory/4600-179-0x0000000077410000-0x000000007759E000-memory.dmp

    Filesize

    1.6MB

  • memory/4600-180-0x0000000077410000-0x000000007759E000-memory.dmp

    Filesize

    1.6MB

  • memory/4600-181-0x0000000077410000-0x000000007759E000-memory.dmp

    Filesize

    1.6MB

  • memory/4600-182-0x0000000077410000-0x000000007759E000-memory.dmp

    Filesize

    1.6MB

  • memory/4600-183-0x0000000077410000-0x000000007759E000-memory.dmp

    Filesize

    1.6MB