Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    135s
  • max time network
    158s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230824-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230824-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28/08/2023, 18:06

General

  • Target

    BH.exe

  • Size

    15.2MB

  • MD5

    85a8294567ed220a7d2fd51dba44245c

  • SHA1

    eaa605d7816bd15b4b97550f94120b372a328977

  • SHA256

    32c449cbdf1999ffc1a4e633e7cc67dd2de795e2cc334e97f1aa1b2cc7062530

  • SHA512

    593944c223409c8555472cc2d7d60b08e5c914768c92b241283db8e439250f3a4f11ff1258819d533b5be0df91773570191da48f7475e762650a3927c134c19c

  • SSDEEP

    196608:s0PpEM8eRnKCSnUip72YpI79+c2PJ8vwYa9odiLuxsu8Phnj/BsCU:s0BEifiUip72YpI7F2BOa9odiLDuw+L

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\BH.exe
    "C:\Users\Admin\AppData\Local\Temp\BH.exe"
    1⤵
      PID:1232

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1232-0-0x0000000000400000-0x00000000017CD000-memory.dmp

      Filesize

      19.8MB

    • memory/1232-1-0x0000000010000000-0x000000001006A000-memory.dmp

      Filesize

      424KB

    • memory/1232-6-0x0000000004900000-0x0000000004901000-memory.dmp

      Filesize

      4KB

    • memory/1232-5-0x00000000778D2000-0x00000000778D3000-memory.dmp

      Filesize

      4KB

    • memory/1232-7-0x0000000000400000-0x00000000017CD000-memory.dmp

      Filesize

      19.8MB

    • memory/1232-8-0x0000000004910000-0x0000000004911000-memory.dmp

      Filesize

      4KB

    • memory/1232-9-0x0000000004920000-0x0000000004921000-memory.dmp

      Filesize

      4KB