Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
159s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
02/10/2023, 11:51
General
-
Target
4e90cb2a696f3f777c5789e8613bd26a4bd897c9b4ca0d8ea42f0338aa3db3aa.exe
-
Size
1.9MB
-
MD5
7ad5aeea9f845dd03f690d74bceda6f7
-
SHA1
0141c446a065d5808ad8bcc22086534d6cda0641
-
SHA256
4e90cb2a696f3f777c5789e8613bd26a4bd897c9b4ca0d8ea42f0338aa3db3aa
-
SHA512
bc96ac20d6c19b694d6dd8fb33b116f07177de32dc0e13ad419feeaec352907c954ba5a932de0c915ff53d52b512de0f9f273815be84a482728f4eedd9870b18
-
SSDEEP
49152:kKQS+9lSeIj+B3lrUccm/rM1HQmR54E5tSxak:jx4S2WxmYfjRthk
Malware Config
Signatures
-
Downloads MZ/PE file
-
UPX packed file 16 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\4e90cb2a696f3f777c5789e8613bd26a4bd897c9b4ca0d8ea42f0338aa3db3aa.exe"C:\Users\Admin\AppData\Local\Temp\4e90cb2a696f3f777c5789e8613bd26a4bd897c9b4ca0d8ea42f0338aa3db3aa.exe"1⤵
- Adds Run key to start application
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
649B
MD5f13b4944c5d1894d081dabc59745893f
SHA10ff91187c1974950ec7072d9e93798fd85ca00c7
SHA25681f65810fbcf53084c88db1706fab083a48211bf839a7a8396a803c9cae83d15
SHA5127955cefaccd7475a18907e7edb39a14d90d1a6b0ebebb60fd6d11d094588b51a79d20e763fea31908f32061369a4260d685384bd3a2fa2c858f299600a79f030
-
Filesize
2KB
MD5dab81d2b479ed4828a153daab70607fb
SHA1843f87f83498a22e0827deadd2641d651026ed7b
SHA2568ce47724c1b24114d06d870bae78ec486bf8129a5fbde8aa0d49ada1f8e8533d
SHA512740cecb067ff65b2e35f6e3036581f683d05927a73b180a82f9fa3d68f6b37a06a0931727bde16c53c460aba037dc1076654eb27dc265568cdfc02b490e1df89
-
Filesize
4KB
MD546e1fc5c9a2c7ad60b596543c3e22bd4
SHA1720ac1ccd0f1960f44c793ec047f5570a4323a01
SHA25660ce90381eedb3c292a44d64a5fefd4f3d246b4409802574d6e849ab00dc0d00
SHA512763ebd6473002c7371b9c44d2eac4448ba0384db6d4a55a76be3491592937d4f5c108e1a977df339191c22c8abbd881d5bf76ae610b1c8490b895af28562d993
-
Filesize
176B
MD5d454f1aeec8d116e23f4bdec1f25e547
SHA108432c748c90a053db7c99d022cbc3565ec0f9f3
SHA256708809a6b087395dcd58457e69364207f92e6b7e56257e4ccebf8f643b0151c2
SHA5124bf571053ea535ae4d988fa1688b925251dab5f8ce7f204ab6fa824aa6727321323d22906f8ee16841c02b7e8c24cddb38bc0737069a3c8e6e59757069266df8
-
Filesize
7.8MB
-
Filesize
7.8MB
-
Filesize
4KB
-
Filesize
7.8MB
-
Filesize
4KB
-
Filesize
7.8MB
-
Filesize
7.8MB
-
Filesize
7.8MB
-
Filesize
7.8MB
-
Filesize
7.8MB
-
Filesize
7.8MB
-
Filesize
7.8MB
-
Filesize
7.8MB
-
Filesize
7.8MB
-
Filesize
7.8MB
-
Filesize
7.8MB
-
Filesize
7.8MB
-
Filesize
7.8MB