Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
-
submitted
24/08/2023, 22:36
General
-
Target
b0fedb766873e39cea4b925ac482fa4d9a8fed8a2810685d3208053b1b9228a3.exe
-
Size
2.2MB
-
MD5
b3467c8b5213819e2ad34af30e71181a
-
SHA1
ebf6364595dfce80dd3ba7446c57cfa51c6937ff
-
SHA256
b0fedb766873e39cea4b925ac482fa4d9a8fed8a2810685d3208053b1b9228a3
-
SHA512
e1cf0e2cfd37060b1d0ac62dd06d53450c9c0b2bd2554701a9711e8127caf79d12c5104ecb28dab98f25828c2f71d6f371530aef23cf4b270d0014282c4bbaec
-
SSDEEP
49152:HAlOjWOD9W0HqCKCHaGDV4XYjzEDrih+YVdypy:gECOD9W3waq4XYHESC
Malware Config
Signatures
-
Adds policy Run key to start application 2 TTPs 2 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 7 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\b0fedb766873e39cea4b925ac482fa4d9a8fed8a2810685d3208053b1b9228a3.exe"C:\Users\Admin\AppData\Local\Temp\b0fedb766873e39cea4b925ac482fa4d9a8fed8a2810685d3208053b1b9228a3.exe"1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\ProgramData\q6evrw291zv8p0ti126wg4o9bkg0g4ijpq3a7h0b301\v23e8z16xs4m2463dn1.exe"C:\ProgramData\q6evrw291zv8p0ti126wg4o9bkg0g4ijpq3a7h0b301\v23e8z16xs4m2463dn1.exe"2⤵
- Adds policy Run key to start application
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.0MB
MD5ff9b42cc7b4edf7c011ef2b95e6e288d
SHA1cf71cb056ecdf0e2e30a9fa4aecc5767dc9de045
SHA256d9ea65e35de4020a37a73373b68b6bd2191e1169ce38a308d50d932930a9991a
SHA512ba24d3dd068eae91203c43afdf7042076bb39d3c2c08ec15e4be315ac3e00207593ce56ed25f36def7d6c871039e6310d3c4824a6babbe96cfc19ee0fc80c04f
-
Filesize
1.0MB
MD5ff9b42cc7b4edf7c011ef2b95e6e288d
SHA1cf71cb056ecdf0e2e30a9fa4aecc5767dc9de045
SHA256d9ea65e35de4020a37a73373b68b6bd2191e1169ce38a308d50d932930a9991a
SHA512ba24d3dd068eae91203c43afdf7042076bb39d3c2c08ec15e4be315ac3e00207593ce56ed25f36def7d6c871039e6310d3c4824a6babbe96cfc19ee0fc80c04f
-
Filesize
464KB
MD58fb40825d6a7ab6615807dbda6c62a62
SHA177c2a29b457dcb392f1ae1aa4d82cee152629f35
SHA256245bf5a58ec5d3dcc34c3d8ecb1dfa996aaff66c26a74eae76c80aacc93e54d1
SHA5121f0b7d2ceb14cecde1dab2310ad42d882804b20930a4e686619d3f6ea86466bbe79b9eabff0e0f513c85dadd16eed22f39cd8f1cedc3763a6900ed59e126ac6b
-
Filesize
464KB
MD58fb40825d6a7ab6615807dbda6c62a62
SHA177c2a29b457dcb392f1ae1aa4d82cee152629f35
SHA256245bf5a58ec5d3dcc34c3d8ecb1dfa996aaff66c26a74eae76c80aacc93e54d1
SHA5121f0b7d2ceb14cecde1dab2310ad42d882804b20930a4e686619d3f6ea86466bbe79b9eabff0e0f513c85dadd16eed22f39cd8f1cedc3763a6900ed59e126ac6b
-
Filesize
964B
MD51ed853dd4d72ca84c5d6f725dd6aa2fe
SHA19f08f7cb81398796a93b63334de270359e1a72b1
SHA2568ec75a696fc3c831856953783cbb235a5d65157128b0a0fb08e06f50e2f11a5f
SHA5122cde9d9471b4886fc891b5de8a230a6d046a057117f41a389c4048d2b1c5982b09a7f3df33256c4ec468482eb7a1f137c7e7c88dfe7bb99c331737bc6f19cc5b
-
Filesize
964B
MD51ed853dd4d72ca84c5d6f725dd6aa2fe
SHA19f08f7cb81398796a93b63334de270359e1a72b1
SHA2568ec75a696fc3c831856953783cbb235a5d65157128b0a0fb08e06f50e2f11a5f
SHA5122cde9d9471b4886fc891b5de8a230a6d046a057117f41a389c4048d2b1c5982b09a7f3df33256c4ec468482eb7a1f137c7e7c88dfe7bb99c331737bc6f19cc5b
-
Filesize
976KB
-
Filesize
1.5MB
-
Filesize
2.2MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
932KB
-
Filesize
400KB
-
Filesize
976KB
-
Filesize
932KB
-
Filesize
764KB
-
Filesize
1.5MB
-
Filesize
932KB
-
Filesize
328KB
-
Filesize
2.2MB
-
Filesize
2.2MB
-
Filesize
2.2MB
-
Filesize
932KB
-
Filesize
400KB
-
Filesize
976KB
-
Filesize
764KB
-
Filesize
1.5MB
-
Filesize
328KB
-
Filesize
328KB