Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    142s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30/08/2023, 07:05

General

  • Target

    c91a7e592ffe0bdf41e67c2af58a6d55.exe

  • Size

    540KB

  • MD5

    c91a7e592ffe0bdf41e67c2af58a6d55

  • SHA1

    3c026ff8ca64b94eb05d04af0994c7150b2c4075

  • SHA256

    dbeca7431cfb6a9a965c3d10bf19fce8ce2f6c7d2395ce5bd2a4f2135121be8a

  • SHA512

    9acafa7177abed5b3c7ee7b7086fefa2fd9e39cd029a5717af8f2c5a8a3d9dfe03ab9072a4cc6204e210cd24a69270156138b0fa434d008236c8d8e6ff82ea45

  • SSDEEP

    12288:j7czeVrwecDd0cIkZM3GqHhE6FlCCxKygxOBSTO6ubMu:jgzeVrwg6ZGGqWvjXxHUf

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: LoadsDriver 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c91a7e592ffe0bdf41e67c2af58a6d55.exe
    "C:\Users\Admin\AppData\Local\Temp\c91a7e592ffe0bdf41e67c2af58a6d55.exe"
    1⤵
      PID:2792

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2792-0-0x000001EB261B0000-0x000001EB2623C000-memory.dmp

      Filesize

      560KB

    • memory/2792-1-0x00007FFA70080000-0x00007FFA70B41000-memory.dmp

      Filesize

      10.8MB

    • memory/2792-2-0x000001EB40710000-0x000001EB40720000-memory.dmp

      Filesize

      64KB

    • memory/2792-4-0x00007FFA70080000-0x00007FFA70B41000-memory.dmp

      Filesize

      10.8MB

    • memory/2792-5-0x000001EB40710000-0x000001EB40720000-memory.dmp

      Filesize

      64KB