Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    154s
  • max time network
    163s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12/10/2023, 10:33

General

  • Target

    993778c3b7b066778aabbbf4c110d8a965e83394c6358b5655ee4cdbb3996391.exe

  • Size

    651KB

  • MD5

    7385a5ddf4b7801cfdf4b4a247ab7837

  • SHA1

    bddc2c8163e976c01be0147f4d5bd32f6e344188

  • SHA256

    993778c3b7b066778aabbbf4c110d8a965e83394c6358b5655ee4cdbb3996391

  • SHA512

    02cb71a1f06aeee9a1ef19261b85986bd1dccb29a224e38b26125c98f2adab05d75f17af28f97c98423178a950db23cd9a2530c75cfee2f87f04c0fad3993ec3

  • SSDEEP

    12288:43EnHJTgHDhjtMcTuCg1XQUmnylBa6XN36X0hyZPAv:mEpTOdtMeGOYBa6XN36k8Pc

Score
8/10

Malware Config

Signatures

  • Disables Task Manager via registry modification
  • Drops desktop.ini file(s) 2 IoCs
  • Drops file in Windows directory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\993778c3b7b066778aabbbf4c110d8a965e83394c6358b5655ee4cdbb3996391.exe
    "C:\Users\Admin\AppData\Local\Temp\993778c3b7b066778aabbbf4c110d8a965e83394c6358b5655ee4cdbb3996391.exe"
    1⤵
    • Drops desktop.ini file(s)
    • Drops file in Windows directory
    PID:1424

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1424-0-0x00007FF8BE4E0000-0x00007FF8BEE81000-memory.dmp

    Filesize

    9.6MB

  • memory/1424-1-0x00007FF8BE4E0000-0x00007FF8BEE81000-memory.dmp

    Filesize

    9.6MB

  • memory/1424-2-0x0000000000E60000-0x0000000000E70000-memory.dmp

    Filesize

    64KB

  • memory/1424-3-0x000000001B640000-0x000000001B68A000-memory.dmp

    Filesize

    296KB

  • memory/1424-6-0x000000001B970000-0x000000001BA16000-memory.dmp

    Filesize

    664KB

  • memory/1424-7-0x000000001BEF0000-0x000000001C3BE000-memory.dmp

    Filesize

    4.8MB

  • memory/1424-8-0x000000001C460000-0x000000001C4FC000-memory.dmp

    Filesize

    624KB

  • memory/1424-9-0x0000000000F30000-0x0000000000F38000-memory.dmp

    Filesize

    32KB

  • memory/1424-10-0x000000001C6F0000-0x000000001C73C000-memory.dmp

    Filesize

    304KB

  • memory/1424-11-0x0000000000E60000-0x0000000000E70000-memory.dmp

    Filesize

    64KB

  • memory/1424-32-0x00007FF8BE4E0000-0x00007FF8BEE81000-memory.dmp

    Filesize

    9.6MB

  • memory/1424-34-0x00007FF8BE4E0000-0x00007FF8BEE81000-memory.dmp

    Filesize

    9.6MB

  • memory/1424-43-0x0000000000E60000-0x0000000000E70000-memory.dmp

    Filesize

    64KB

  • memory/1424-44-0x0000000000E60000-0x0000000000E70000-memory.dmp

    Filesize

    64KB

  • memory/1424-45-0x0000000000E60000-0x0000000000E70000-memory.dmp

    Filesize

    64KB