Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
153s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
23/09/2023, 22:02
General
-
Target
3aeb37918455a49547f3dd15a6844fa3f5e07d3802dd89cb69cc6588c3679b22.exe
-
Size
74KB
-
MD5
e12f7aad79d31f4fca0bee7534836b99
-
SHA1
b7e74c62279c2149ffe93e0836dae840c3563d29
-
SHA256
3aeb37918455a49547f3dd15a6844fa3f5e07d3802dd89cb69cc6588c3679b22
-
SHA512
2f60bea0b687d209283c71a301c29a8881dd1b2bac5b23b32348a1015c3605a863e8009253b98c19dd09d6d240c113a246af82135f2c4293cc7f4db59ce15385
-
SSDEEP
768:agO5xRYi+SfSWHHNvvG5bnl/NqNwsKVDstHxYD0p1aXKynF0vQmYZS0HdJnfWO7l:RshfSWHHNvoLqNwDDGw02eQmh0HjWO7l
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Modifies system executable filetype association 2 TTPs 5 IoCs
-
Drops file in System32 directory 4 IoCs
-
Drops file in Windows directory 2 IoCs
-
Modifies registry class 15 IoCs
-
Suspicious behavior: EnumeratesProcesses 28 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3aeb37918455a49547f3dd15a6844fa3f5e07d3802dd89cb69cc6588c3679b22.exe"C:\Users\Admin\AppData\Local\Temp\3aeb37918455a49547f3dd15a6844fa3f5e07d3802dd89cb69cc6588c3679b22.exe"1⤵
- Modifies system executable filetype association
- Drops file in System32 directory
- Drops file in Windows directory
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Windows\system\rundll32.exeC:\Windows\system\rundll32.exe2⤵
- Executes dropped EXE
- Modifies system executable filetype association
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
77KB
MD5d93237f514abb8c486cec50bbe87748e
SHA14b855724adfb34b8fb5d12364d22484f951df208
SHA2562d780e15b42f3c0a818ebc7c31c8d530d654d1e261c49a4baed568057e102bb8
SHA51250593917c4eac081725aa6a40d54e76836582a6e46b11b39c8f6590d30c29b803d37fef4c999652584dcd68c05e7a72417e0866b602cbfc4adab4e1bd199bab3
-
Filesize
80KB
MD5f356ebd54b77f47af8631076f2bcbbab
SHA1a1d0f053fc6127abb50cf83d812f1837e0e30a9c
SHA256a21ae319d2393ebae38fd9eea5c7ac76ce9e441ed26cc14be83981976359554e
SHA51237da32f3c6f0ee8047179760d42e3b69aa41b082738a3c28bfc9c0ec28bb006dd11cc699a38fd5ef83992688badc511eedae3e96c1f5f7c4801600bd9c98ea0e
-
Filesize
80KB
MD5f356ebd54b77f47af8631076f2bcbbab
SHA1a1d0f053fc6127abb50cf83d812f1837e0e30a9c
SHA256a21ae319d2393ebae38fd9eea5c7ac76ce9e441ed26cc14be83981976359554e
SHA51237da32f3c6f0ee8047179760d42e3b69aa41b082738a3c28bfc9c0ec28bb006dd11cc699a38fd5ef83992688badc511eedae3e96c1f5f7c4801600bd9c98ea0e
-
Filesize
86KB
-
Filesize
86KB
-
Filesize
86KB