Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    174s
  • max time network
    207s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/10/2023, 19:06

General

  • Target

    MonitorChatboot.exe

  • Size

    35.5MB

  • MD5

    ab5ea1a0e964695519bebff31bc60cb1

  • SHA1

    fcb52a74037ed138c1295a975a0c309f4a0c793b

  • SHA256

    e9ed43d42e6896f303754ee6ed2f7ee4f51e961a0b04d3f92fd3f1694f911c10

  • SHA512

    bdd54163b7770321fc6ca4b2f0916248c9cc6db9093a5323dbb30e0384d4418ff4cd1f932bffa32f9fab2f2b886e979fa875ff4e45aa5644012335b5136fb412

  • SSDEEP

    196608:pLSc/IBO8SxboUnEZJ1sDa3FTCCn7og2TdhCbhX1RCQPkt3iZ394DVxPyi:ZS0Ik8SxbDAJ1sm3Njhchmh/9Ws9Yxz

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\MonitorChatboot.exe
    "C:\Users\Admin\AppData\Local\Temp\MonitorChatboot.exe"
    1⤵
      PID:1064

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Temp\ConfTInject.ini

      Filesize

      644B

      MD5

      fc7c76f3022e1d8c835a386105b37af5

      SHA1

      46fb68864722e8b2d275a0d43818856fa854f702

      SHA256

      6c9945bd095d001c82f96d16fa6f189d4cd2026285bf8716617e7b2ca704864f

      SHA512

      91383733d720ecc6b9981547b9bb876462fe845bcb61182e61f343a9b3970fc8a5cea5767899f3de61fb6afb1e4e5a75a07459a89c7dbae869946abfd4c5b06f

    • C:\Users\Admin\AppData\Local\Temp\ConfTInject.ini

      Filesize

      644B

      MD5

      fc7c76f3022e1d8c835a386105b37af5

      SHA1

      46fb68864722e8b2d275a0d43818856fa854f702

      SHA256

      6c9945bd095d001c82f96d16fa6f189d4cd2026285bf8716617e7b2ca704864f

      SHA512

      91383733d720ecc6b9981547b9bb876462fe845bcb61182e61f343a9b3970fc8a5cea5767899f3de61fb6afb1e4e5a75a07459a89c7dbae869946abfd4c5b06f

    • C:\Users\Admin\AppData\Local\Temp\ConfTInject.ini

      Filesize

      119B

      MD5

      d0b10e5c6dd12a17f28ebbeadd3c6997

      SHA1

      81394ca9fe52c53d72409386152c972b75f977fc

      SHA256

      ea056ac9b375354245a6f8a8161ace1163e010351bea1271dd3d2ab7958330f7

      SHA512

      109a1a2cfff223dc6f339368d0963b6b87df5ddc9efe8aaf3a3ee0490cec49db8904e4b7efb07914994134a5d6032a8dafcb2ece0c4cf1b737571326ef2111a0

    • memory/1064-0-0x00000000048D0000-0x00000000048D1000-memory.dmp

      Filesize

      4KB

    • memory/1064-47-0x0000000000400000-0x0000000002799000-memory.dmp

      Filesize

      35.6MB