Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    152s
  • max time network
    158s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    17/09/2023, 21:27

General

  • Target

    Soar Installer.exe

  • Size

    76.3MB

  • MD5

    4175b4ca85b0c2a70eec398354ac57e3

  • SHA1

    2db6fb3a6b9cabb29dcdd8a91aca8ef9136fd436

  • SHA256

    d3f8e7201ccb06225fe22fa19f5ab5c781ea34e66e120836066845711fe88f2e

  • SHA512

    7fd55889ed25f4e8e537b157e3ddff61d2d83503b0a55c65df4a2e4d6349c0c408c66a860ba7441f33bc2f3cd1455b747ff176394daed42bba9d2b55e845e18a

  • SSDEEP

    1572864:ypSi+t2/oOyCdG/cfCi8ivkRmqRpeZH5CCUWuEXDQIjHnHeydt4QO:YI2dxUcfCi8+kRJEZH5CCXXbjHHFdSQO

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Soar Installer.exe
    "C:\Users\Admin\AppData\Local\Temp\Soar Installer.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:3224
    • C:\Users\Admin\AppData\Local\Temp\is-761NU.tmp\Soar Installer.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-761NU.tmp\Soar Installer.tmp" /SL5="$A0054,79072085,1088512,C:\Users\Admin\AppData\Local\Temp\Soar Installer.exe"
      2⤵
      • Executes dropped EXE
      PID:3712

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\is-761NU.tmp\Soar Installer.tmp

    Filesize

    3.3MB

    MD5

    12f82197a0231c9c3ce864008b421869

    SHA1

    1f460c14e6b31cfdd79456023933aa8cd5088905

    SHA256

    18a287987ef5c733faef4b8837fb4590ed189f3b9a6f47ca8ab7c30e861d3f42

    SHA512

    133949c9b18a4ad9d42eb7be2b56e97e263494c5d14c561b0a705c10ab194c1a97bd837b568fe22a65abd74e1945f47277ed32dbe359849ae97ba2ae03952c67

  • memory/3224-1-0x0000000000400000-0x0000000000517000-memory.dmp

    Filesize

    1.1MB

  • memory/3224-8-0x0000000000400000-0x0000000000517000-memory.dmp

    Filesize

    1.1MB

  • memory/3712-6-0x0000000002760000-0x0000000002761000-memory.dmp

    Filesize

    4KB

  • memory/3712-9-0x0000000000400000-0x0000000000753000-memory.dmp

    Filesize

    3.3MB

  • memory/3712-10-0x0000000002760000-0x0000000002761000-memory.dmp

    Filesize

    4KB