Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
142s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
21/08/2023, 20:53
Static task
static1
Behavioral task
behavioral1
Sample
ce1166889d4dad217bdf948fb3d0cb91238d2262eee35012d8353b51000727bc.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
ce1166889d4dad217bdf948fb3d0cb91238d2262eee35012d8353b51000727bc.exe
Resource
win10v2004-20230703-en
General
-
Target
ce1166889d4dad217bdf948fb3d0cb91238d2262eee35012d8353b51000727bc.exe
-
Size
723KB
-
MD5
2bd8ead2f10be00c3b8258888bb79ab8
-
SHA1
b532b473b7d79317a8f36c752e951e5234d53f22
-
SHA256
ce1166889d4dad217bdf948fb3d0cb91238d2262eee35012d8353b51000727bc
-
SHA512
e4813dd11f996fdc092d43ab65c0a5b640e48922398eedd2e3e740389848235e5f4974e52246714d28cf23aeb3687531e66fdcc4859f7406b80dd7f21e72abb5
-
SSDEEP
12288:4vaaijcL+yfSD0/PLhNEdhVPc8XX8cVCdW6jcsK1dreM+b35crfbx0ZpcO49H/TF:4vtV+yfSD8X0UAX8cAdMyNbcKpQ
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 788 ce1166889d4dad217bdf948fb3d0cb91238d2262eee35012d8353b51000727bc.exe -
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 788 ce1166889d4dad217bdf948fb3d0cb91238d2262eee35012d8353b51000727bc.exe 788 ce1166889d4dad217bdf948fb3d0cb91238d2262eee35012d8353b51000727bc.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 788 ce1166889d4dad217bdf948fb3d0cb91238d2262eee35012d8353b51000727bc.exe 788 ce1166889d4dad217bdf948fb3d0cb91238d2262eee35012d8353b51000727bc.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\ce1166889d4dad217bdf948fb3d0cb91238d2262eee35012d8353b51000727bc.exe"C:\Users\Admin\AppData\Local\Temp\ce1166889d4dad217bdf948fb3d0cb91238d2262eee35012d8353b51000727bc.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:788
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
724KB
MD5a96fbd5e66b31f3d816ad80f623e9bd9
SHA14eda42260bd3eb930cd4eafd7d15c6af367bcf18
SHA2562e67ba278646fde95bb614dcbcc7da1c6bf7976c918b2c6ad3d78640000326f3
SHA51243921107313775ea14b1bd33cf758c13798f4fa1c1074771c1c96b1b43b98f3416d249ed8ab3171383772d0054829c3754a91b5e94135f1df6d67a76f599c80e