Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
177s -
max time network
178s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
11/10/2023, 15:41
Static task
static1
Behavioral task
behavioral1
Sample
b517a1d2e474a6475600e67b6942420f90dde12f8520e2e1dd6f33560fb02dc9.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
b517a1d2e474a6475600e67b6942420f90dde12f8520e2e1dd6f33560fb02dc9.exe
Resource
win10v2004-20230915-en
General
-
Target
b517a1d2e474a6475600e67b6942420f90dde12f8520e2e1dd6f33560fb02dc9.exe
-
Size
6.3MB
-
MD5
c9bcb12fb73e210b94e82d571ed2d245
-
SHA1
a0eaa75e5ebcda66c1fcde621b2e4385f34c4615
-
SHA256
b517a1d2e474a6475600e67b6942420f90dde12f8520e2e1dd6f33560fb02dc9
-
SHA512
a10addfd311ead10d0d69d6a2a50bee817d95c602300a1748c1a6a16303c83cfe0979772677a3d0cc596c9473b02f3e0f65206329d8765b7dee3397045638217
-
SSDEEP
98304:GwYsi/0YL5Yc68aGAE3/MarNv6Gh8A/MFUSuDt+983JYp:GqYts8pAEhrNvb2FUlc983M
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 3464 b517a1d2e474a6475600e67b6942420f90dde12f8520e2e1dd6f33560fb02dc9.exe 3464 b517a1d2e474a6475600e67b6942420f90dde12f8520e2e1dd6f33560fb02dc9.exe 3464 b517a1d2e474a6475600e67b6942420f90dde12f8520e2e1dd6f33560fb02dc9.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
24KB
MD54c36b98f83d8c928477190728178e3a8
SHA15926a7b8724ebdfb51e375fa96da5f03462c932c
SHA256799367ba0fc9c9ec823ccaa0f44a876c1e5799c105d848689dbf66a0b7800433
SHA512709833e8cbe3fd8998a865ee972e540ad83827ae28ae5fc86cddefca8a52e37d1927a1636bc1c16c4f033d620a525e17b452c525c891ab8fdbcb9d437fd16808
-
Filesize
1.3MB
MD5875c31064b2b780ed07bf59d6d1fc70a
SHA12d63e4014a0d3a52b3146ce9892b2702e02068e4
SHA256e612ca94d4550b1878b774af8875860e160fd0a7cefb9e134bfbdb88da09beff
SHA5126f9d6f9d690f0b181d6f175b3e98e009afc3f44799fd7ab85c3e0cdf4ce376c043d9184e49c51e57edca14c937cbeb30d7b09c24135daffd7b5effca7f70d357
-
Filesize
126B
MD5d999e2929339add9cebbef295d1bbeb7
SHA15c41bee0fdae4f025c2770c8c902148b375208a3
SHA256237dce3d880566ed658d08372e355ff743bcb6f32aa4b24a2926b062c56c77c0
SHA512f98fa001c8846bd2029f1254e8108cb79ddcee2556e864dd699a8066f40e809d9f63faac2125fa697057288785ae3eb94cbecb7dab93553ac57deea07c1262ae
-
Filesize
759KB
MD5f7edc2f70dcdf9018d2d3d37d8fd6022
SHA1f3c62e0f7bbee32e8b14598918bcdd7fea271a8d
SHA25673c601edeb03f0d383a2c06d161287a7adb1889621d54cc8a53b76d540a50b04
SHA5122df823836b57eef824192f454f771445999bc7d32e1f4401a321d17547ab744885ccd40304b6dd401a1b796e209c342772543712978f46ce4ba6b76acae06661
-
Filesize
6.3MB
MD5c9bcb12fb73e210b94e82d571ed2d245
SHA1a0eaa75e5ebcda66c1fcde621b2e4385f34c4615
SHA256b517a1d2e474a6475600e67b6942420f90dde12f8520e2e1dd6f33560fb02dc9
SHA512a10addfd311ead10d0d69d6a2a50bee817d95c602300a1748c1a6a16303c83cfe0979772677a3d0cc596c9473b02f3e0f65206329d8765b7dee3397045638217