Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

L.exe

windows10-1703-x64

7

Analysis

  • max time kernel
    74s
  • max time network
    125s
  • platform
    windows10-1703_x64
  • resource
    win10-20230703-en
  • resource tags

    arch:x64arch:x86image:win10-20230703-enlocale:en-usos:windows10-1703-x64system
  • submitted
    11/07/2023, 07:45

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    L.exe

  • Size

    6.7MB

  • MD5

    f4e568fb9664e3f574c2b1a248aa0569

  • SHA1

    ce7f9bdb4df9f8ca1f63ce9e88769970beba0bfc

  • SHA256

    678c7cb358640c1aa78fae2b632501b638f9b16f5dc9dff4b13b4c6f62dc12a0

  • SHA512

    3f687c494e2f7e14298a57f60e760e110914c51b842652c29495d10410d04af916396199454df0b2173deff8c9ec34a1f09235f545e5d7e5a6cd7d0e07631ffd

  • SSDEEP

    98304:jU+zTX4Pf1N2zIh3ET9Y9MxVMOPUh3PdWPEUrJY6AOxbHnd1W1QtYP3THIeqm4m:j/X4FMIZETKwjPePdrQJ/Bd1WutYPjo

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 2 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\L.exe
    "C:\Users\Admin\AppData\Local\Temp\L.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:5092
    • C:\Users\Admin\AppData\Local\Temp\L.exe
      "C:\Users\Admin\AppData\Local\Temp\L.exe"
      2⤵
      • Loads dropped DLL
      PID:3156
  • C:\Windows\System32\rundll32.exe
    C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
    1⤵
      PID:2292

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Temp\5.txt
      Filesize

      889B

      MD5

      35673b2529b0791d5553e0dd4037c854

      SHA1

      b3ac03a755ec96f42b81663c03c939834fa7173a

      SHA256

      a7bec9889145cd54eb7c2d91a48c863158dc9461607abc4e498bbfe52a53f92b

      SHA512

      0dc45c1555e6721dc7d6f136f3bbb03f08b0b11fcff7a338558ad2b7376f67603fd6dd3aa13ce6e7e9dbc011935604e80c723a28b1a002a0f2b36c15abb8e0b1

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\_MEI50922\VCRUNTIME140.dll
      Filesize

      106KB

      MD5

      4585a96cc4eef6aafd5e27ea09147dc6

      SHA1

      489cfff1b19abbec98fda26ac8958005e88dd0cb

      SHA256

      a8f950b4357ec12cfccddc9094cca56a3d5244b95e09ea6e9a746489f2d58736

      SHA512

      d78260c66331fe3029d2cc1b41a5d002ec651f2e3bbf55076d65839b5e3c6297955afd4d9ab8951fbdc9f929dbc65eb18b14b59bce1f2994318564eb4920f286

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\_MEI50922\base_library.zip
      Filesize

      1.8MB

      MD5

      83b06d6f90f33c512eee102a649279f6

      SHA1

      96e5734c6d26b9ae9ed3fc3251e8c56ed9d468db

      SHA256

      1a2fd2bb30f1250cb552cb17839f806602da1559e29adbee5508b6e490306a73

      SHA512

      3404d4a06e75837b4b3b3bc53141e517feca93362e35cb1a18fee8d3799b4ca2e7c4c4a121d535446d05abd09bb9a0eb5577c748db65c544283575e065e64845

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\_MEI50922\python311.dll
      Filesize

      5.5MB

      MD5

      5a5dd7cad8028097842b0afef45bfbcf

      SHA1

      e247a2e460687c607253949c52ae2801ff35dc4a

      SHA256

      a811c7516f531f1515d10743ae78004dd627eba0dc2d3bc0d2e033b2722043ce

      SHA512

      e6268e4fad2ce3ef16b68298a57498e16f0262bf3531539ad013a66f72df471569f94c6fcc48154b7c3049a3ad15cbfcbb6345dacb4f4ed7d528c74d589c9858

      Download Submit

    • \Users\Admin\AppData\Local\Temp\_MEI50922\VCRUNTIME140.dll
      Filesize

      106KB

      MD5

      4585a96cc4eef6aafd5e27ea09147dc6

      SHA1

      489cfff1b19abbec98fda26ac8958005e88dd0cb

      SHA256

      a8f950b4357ec12cfccddc9094cca56a3d5244b95e09ea6e9a746489f2d58736

      SHA512

      d78260c66331fe3029d2cc1b41a5d002ec651f2e3bbf55076d65839b5e3c6297955afd4d9ab8951fbdc9f929dbc65eb18b14b59bce1f2994318564eb4920f286

      Download Submit

    • \Users\Admin\AppData\Local\Temp\_MEI50922\python311.dll
      Filesize

      5.5MB

      MD5

      5a5dd7cad8028097842b0afef45bfbcf

      SHA1

      e247a2e460687c607253949c52ae2801ff35dc4a

      SHA256

      a811c7516f531f1515d10743ae78004dd627eba0dc2d3bc0d2e033b2722043ce

      SHA512

      e6268e4fad2ce3ef16b68298a57498e16f0262bf3531539ad013a66f72df471569f94c6fcc48154b7c3049a3ad15cbfcbb6345dacb4f4ed7d528c74d589c9858

      Download Submit