Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    143s
  • max time network
    157s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20/05/2023, 19:37

General

  • Target

    mingw-get-setup.exe

  • Size

    91KB

  • MD5

    60737d3eabafc0def38e26fa31648b35

  • SHA1

    997a8f7136da1ae6c188b98aab6042293558f5a7

  • SHA256

    a5de8c70676fdd157414e3116c7cb6f3dba48e549b5880177b10e4e6bc6c282e

  • SHA512

    cc455b3092614452163700ab195d8dd9fd2f45836e62933a4f48b4952ab8ae820883d37331fe7ed4b2355947e04dcd18df2a0355a753b8ebbe49f0b5615162de

  • SSDEEP

    1536:sCbVtp1jq4DLe4/aBwRWfDwcGXccHRv0xWr6sRsOGz4E9c1/nouy8gPAB:VbV5jqGKaamRWfzGMEco+OBOcVoutgM

Score
7/10
upx

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs
  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\mingw-get-setup.exe
    "C:\Users\Admin\AppData\Local\Temp\mingw-get-setup.exe"
    1⤵
    • Loads dropped DLL
    PID:3792

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\MinGW\libexec\mingw-get\mingw-get-0.dll

    Filesize

    550KB

    MD5

    1c56dbb1ed0b166444ea83fce0abe31f

    SHA1

    55b2663e82b5995656c9886cd5a0e25d2db9972b

    SHA256

    bdfd256c171045c9692f79759d1896ffb46e211640a72226ab13c3035d8bd583

    SHA512

    b4ab3bb1d32ea0f464c408ec1f5037c1441ab072f165b933f44224fff6d5156adedc9d03e4637fc5a829e3de04c3329a0700bd9c56cb2b1bb1b0d4730cbce27f

  • C:\MinGW\libexec\mingw-get\mingw-get-setup-0.dll

    Filesize

    143KB

    MD5

    42fa2eba01d71aab3cbd8a276ab81e54

    SHA1

    8cee36f8d93df4c87e28df8580a5987bce47b31d

    SHA256

    3ebf0315c62276f63eb19cd96e05e03f27b2241cb1a79a764e004684181c756f

    SHA512

    d22fa8be5b7a4f3f264f7655bcf8628920589a5a0cb4e1ceb18894c494090b40e0fdc07547e7bf1e0bf26ab81c5aa83ef5b8f481aaffc2d663ef5e5c4dcbd75b

  • C:\MinGW\libexec\mingw-get\mingw-get-setup-0.dll

    Filesize

    143KB

    MD5

    42fa2eba01d71aab3cbd8a276ab81e54

    SHA1

    8cee36f8d93df4c87e28df8580a5987bce47b31d

    SHA256

    3ebf0315c62276f63eb19cd96e05e03f27b2241cb1a79a764e004684181c756f

    SHA512

    d22fa8be5b7a4f3f264f7655bcf8628920589a5a0cb4e1ceb18894c494090b40e0fdc07547e7bf1e0bf26ab81c5aa83ef5b8f481aaffc2d663ef5e5c4dcbd75b

  • C:\MinGW\libexec\mingw-get\mingw-get-setup-0.dll

    Filesize

    143KB

    MD5

    42fa2eba01d71aab3cbd8a276ab81e54

    SHA1

    8cee36f8d93df4c87e28df8580a5987bce47b31d

    SHA256

    3ebf0315c62276f63eb19cd96e05e03f27b2241cb1a79a764e004684181c756f

    SHA512

    d22fa8be5b7a4f3f264f7655bcf8628920589a5a0cb4e1ceb18894c494090b40e0fdc07547e7bf1e0bf26ab81c5aa83ef5b8f481aaffc2d663ef5e5c4dcbd75b

  • C:\MinGW\var\cache\mingw-get\data\mingw32-dos2unix.xml

    Filesize

    6KB

    MD5

    f2f664594a07ad844900e498931856ac

    SHA1

    7431980a6c13bc42a8f4e514383086ea613b20b8

    SHA256

    88b6a2e5cd0584f7ba6a6bcdd20df823bd9aa0c0cdc52c7949680d8985e24de6

    SHA512

    cc3991cd275c9306e49c5c3211b68afd3ab935443e33787c6f8cdc2ee0ac748f23a481e096479618e9eda4b58b741d7a8d9467b2c10190c9db465e60f8f2adce

  • C:\MinGW\var\cache\mingw-get\packages\mingw-get-0.6.3-mingw32-pre-20170905-1-bin.tar.xz

    Filesize

    262KB

    MD5

    cbadecd046524947608d284878ec8942

    SHA1

    4cea1a0da590cf40ec82ad665d342ca46fac8112

    SHA256

    82552612bdcee990152e2806d2ebf29990129679508db48479af922fc017d5d9

    SHA512

    3a24c1d38d5175fdeba0a82b902635632c571da4febb59b3b78601ba1986773788912c8f047caf11f0bb4f8f58a67bcde6203a2f790129093f65eeb558d5d568

  • C:\MinGW\var\cache\mingw-get\packages\mingw-get-0.6.3-mingw32-pre-20170905-1-gui.tar.xz

    Filesize

    63KB

    MD5

    f6098e8e7b53366872ede448295f7858

    SHA1

    23b765d5a643c0e4bac762c9a15e9c2a91a00a58

    SHA256

    1acec5de7f08b5f806a567bda423a060b305722f725df6e265d083f745d04356

    SHA512

    6d7a4f57617083db43a5cbcb23d7472bdde5cc8cce3ff52e9f76378208cb8c9acf674815d6e551d6ae00527ade7d017d55166a6040798e1fa96c4a228bdb9be8

  • C:\MinGW\var\cache\mingw-get\packages\mingw-get-0.6.3-mingw32-pre-20170905-1-lic.tar.xz

    Filesize

    11KB

    MD5

    f18ede16328cbc686aa9b4850552a31e

    SHA1

    9f726f6d37c11d0eebd89aa530fa29a738844e14

    SHA256

    8265c4e66f94a64307abb907f84c1caf0fe746cefb517081be3e9d5b59a18747

    SHA512

    ea6ea80b5c71c6015fd3dc6ff7c8541deabe8cfed33bc23b61af61ad4e3e4c2482779d37e246863a143a03d0147b1c0c58c3d64eadb223a8fd8aac7b97855174

  • C:\MinGW\var\lib\mingw-get\data\mingw32-binutils.xml

    Filesize

    3KB

    MD5

    1f986ff079aaa9160c5fc4ac03895c4c

    SHA1

    f7b8c5e7b102fd463cdde8174550af5caf22db9f

    SHA256

    e17b4d3c180e29b433954c639a25f03dcfb5628edb088a7035e06c9cfe14390e

    SHA512

    a2d9cffe74572bf85eed1e6b6bda57e8e05ca09abd4ecd84f090e2f6e3ee78a831a0608ca4f5b58a2601b71e5576212ff0256aa6b73ecf1996242b6c22f7f9fa

  • C:\MinGW\var\lib\mingw-get\data\mingw32-expat.xml

    Filesize

    4KB

    MD5

    ff41a76eaa6836b48fafda8a8084fcfc

    SHA1

    c4a5643c803e04588a7de1a3f288609dafe4ab92

    SHA256

    172d9f2c1148a857879b34121b339bf5f3b8e82e37abe57413c7a25858b35d3f

    SHA512

    0ebb0b3572179db7514dcb54911901ba34bdacb566abe7089e5da9280d1840789297d1afcade95cf183b1e596a730a04f3141f5a0f0a460b41233b6f772babfd

  • C:\MinGW\var\lib\mingw-get\data\mingw32-gcc4.xml

    Filesize

    31KB

    MD5

    a3eec46dd1f3c2976f47cea37eae8270

    SHA1

    d50144eb042ad4c30f00e603b2728acf7c0af81f

    SHA256

    45ea2fee7f10045ae041f43c170929ca18134cf3116fdbac572c93b9db05769b

    SHA512

    5f06f8eaa04f9b95120a3e9c1b7ff0264219968a1953cf1a52e7446a086c242d6e3b1ab30812f4b6bb2cb44b0f6aa20093db4030304737734e2046acf61e1108

  • C:\MinGW\var\lib\mingw-get\data\mingw32-package-list.xml

    Filesize

    3KB

    MD5

    c1c594e149fa70f21f236da7bfebd635

    SHA1

    e19c03cb60d2ed02146b23115420f8eb33e0b1a9

    SHA256

    452a606744d0a94f785ab0ae1d26edf38ab92fb029af2830a64568a8995e35d5

    SHA512

    0e93ab834d041fedcf5802afd07a51a9d93c3fe11d0b879595d96b4c84a2cf48a57c661b550f7fc3d802c8c2df51dd3e3c68396528a37692c5c8eb3060a42243

  • C:\MinGW\var\lib\mingw-get\data\package-list.xml

    Filesize

    493B

    MD5

    f124d9187137d6965a4857cd82343cd1

    SHA1

    ef0cbc6b68ad0c716eb19eeb9f974d3a708042ea

    SHA256

    879835005c823d719a788f185c4ff218deb900e584e4e9165aea00dbcd71a371

    SHA512

    1e98ad4ac5dac5a9672339814994f5573b24b5f0498d4795bc65dacb5e91dad0e40cedac6966140c34073280c1fe8963e77b441565e654aa70e6d5d0f6c2da9e

  • C:\MinGW\var\lib\mingw-get\data\profile.xml

    Filesize

    5KB

    MD5

    cdd18aad7799b67bfc6f4e84f91af812

    SHA1

    ee063eaa1474add88074b896dca98ce9337281bb

    SHA256

    b8eacd302acd073e5d2b60241737573f32aca1cf1969d834a59aa2262e001e7f

    SHA512

    a2043aa1a9a511ecf392c2502c81d87fcc584cac859eb38ad9ed3b86ede82e25a566b1336f379144edadf882eaeaea62a3e19051e84fce9e28b8f1607c857882

  • memory/3792-452-0x0000000005500000-0x000000000552F000-memory.dmp

    Filesize

    188KB

  • memory/3792-461-0x0000000005500000-0x000000000552F000-memory.dmp

    Filesize

    188KB

  • memory/3792-436-0x0000000005500000-0x000000000552F000-memory.dmp

    Filesize

    188KB

  • memory/3792-437-0x0000000005500000-0x000000000552F000-memory.dmp

    Filesize

    188KB

  • memory/3792-438-0x0000000005500000-0x000000000552F000-memory.dmp

    Filesize

    188KB

  • memory/3792-439-0x0000000005500000-0x000000000552F000-memory.dmp

    Filesize

    188KB

  • memory/3792-440-0x0000000005500000-0x000000000552F000-memory.dmp

    Filesize

    188KB

  • memory/3792-441-0x0000000005500000-0x000000000552F000-memory.dmp

    Filesize

    188KB

  • memory/3792-443-0x0000000005500000-0x000000000552F000-memory.dmp

    Filesize

    188KB

  • memory/3792-442-0x0000000005500000-0x000000000552F000-memory.dmp

    Filesize

    188KB

  • memory/3792-444-0x0000000005500000-0x000000000552F000-memory.dmp

    Filesize

    188KB

  • memory/3792-445-0x0000000005500000-0x000000000552F000-memory.dmp

    Filesize

    188KB

  • memory/3792-446-0x0000000005500000-0x000000000552F000-memory.dmp

    Filesize

    188KB

  • memory/3792-447-0x0000000005500000-0x000000000552F000-memory.dmp

    Filesize

    188KB

  • memory/3792-448-0x0000000005500000-0x000000000552F000-memory.dmp

    Filesize

    188KB

  • memory/3792-450-0x0000000005500000-0x000000000552F000-memory.dmp

    Filesize

    188KB

  • memory/3792-449-0x0000000005500000-0x000000000552F000-memory.dmp

    Filesize

    188KB

  • memory/3792-451-0x0000000005500000-0x000000000552F000-memory.dmp

    Filesize

    188KB

  • memory/3792-434-0x0000000005500000-0x000000000552F000-memory.dmp

    Filesize

    188KB

  • memory/3792-454-0x0000000005500000-0x000000000552F000-memory.dmp

    Filesize

    188KB

  • memory/3792-453-0x0000000005500000-0x000000000552F000-memory.dmp

    Filesize

    188KB

  • memory/3792-456-0x0000000005500000-0x000000000552F000-memory.dmp

    Filesize

    188KB

  • memory/3792-455-0x0000000005500000-0x000000000552F000-memory.dmp

    Filesize

    188KB

  • memory/3792-459-0x0000000005500000-0x000000000552F000-memory.dmp

    Filesize

    188KB

  • memory/3792-457-0x0000000005500000-0x000000000552F000-memory.dmp

    Filesize

    188KB

  • memory/3792-458-0x0000000005500000-0x000000000552F000-memory.dmp

    Filesize

    188KB

  • memory/3792-460-0x0000000005500000-0x000000000552F000-memory.dmp

    Filesize

    188KB

  • memory/3792-435-0x0000000005500000-0x000000000552F000-memory.dmp

    Filesize

    188KB

  • memory/3792-462-0x0000000005500000-0x000000000552F000-memory.dmp

    Filesize

    188KB

  • memory/3792-463-0x0000000005500000-0x000000000552F000-memory.dmp

    Filesize

    188KB

  • memory/3792-464-0x0000000005500000-0x000000000552F000-memory.dmp

    Filesize

    188KB

  • memory/3792-466-0x0000000005500000-0x000000000552F000-memory.dmp

    Filesize

    188KB

  • memory/3792-467-0x0000000005500000-0x000000000552F000-memory.dmp

    Filesize

    188KB

  • memory/3792-468-0x0000000005500000-0x000000000552F000-memory.dmp

    Filesize

    188KB

  • memory/3792-465-0x0000000005500000-0x000000000552F000-memory.dmp

    Filesize

    188KB

  • memory/3792-470-0x0000000005500000-0x000000000552F000-memory.dmp

    Filesize

    188KB

  • memory/3792-469-0x0000000005500000-0x000000000552F000-memory.dmp

    Filesize

    188KB

  • memory/3792-471-0x0000000005500000-0x000000000552F000-memory.dmp

    Filesize

    188KB

  • memory/3792-472-0x0000000005500000-0x000000000552F000-memory.dmp

    Filesize

    188KB

  • memory/3792-474-0x0000000005500000-0x000000000552F000-memory.dmp

    Filesize

    188KB

  • memory/3792-473-0x0000000005500000-0x000000000552F000-memory.dmp

    Filesize

    188KB

  • memory/3792-475-0x0000000005500000-0x000000000552F000-memory.dmp

    Filesize

    188KB

  • memory/3792-477-0x0000000005500000-0x000000000552F000-memory.dmp

    Filesize

    188KB

  • memory/3792-433-0x0000000005500000-0x000000000552F000-memory.dmp

    Filesize

    188KB

  • memory/3792-431-0x0000000005500000-0x000000000552F000-memory.dmp

    Filesize

    188KB

  • memory/3792-432-0x0000000005500000-0x000000000552F000-memory.dmp

    Filesize

    188KB

  • memory/3792-430-0x0000000005500000-0x000000000552F000-memory.dmp

    Filesize

    188KB

  • memory/3792-429-0x0000000005500000-0x000000000552F000-memory.dmp

    Filesize

    188KB

  • memory/3792-428-0x0000000005500000-0x000000000552F000-memory.dmp

    Filesize

    188KB

  • memory/3792-425-0x0000000005500000-0x000000000552F000-memory.dmp

    Filesize

    188KB

  • memory/3792-155-0x0000000000400000-0x000000000043B000-memory.dmp

    Filesize

    236KB

  • memory/3792-133-0x0000000000400000-0x000000000043B000-memory.dmp

    Filesize

    236KB

  • memory/3792-476-0x0000000005500000-0x000000000552F000-memory.dmp

    Filesize

    188KB