Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    142s
  • max time network
    166s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    14/10/2023, 19:38

General

  • Target

    NEAS.ff41d6424f11505c3840012b55703380.exe

  • Size

    1.9MB

  • MD5

    ff41d6424f11505c3840012b55703380

  • SHA1

    f5801ee28958cd1ae05abbe961b5ea950886a80d

  • SHA256

    08cf55cd2ea9fd3c7e836e60023a71d076f8419ac4591220f73733eb62272e87

  • SHA512

    0d64ff14317aedd4110b54497f1d695b2121f6c80de3a7d666984955f2b145c4ce5641a64b931ef1076eaec6374ff7593f3e3be8fa9ae6906c9c110df87ce445

  • SSDEEP

    49152:7VtENNb/R88A7VH5rukQdIFFBOEVjOT6ktQ6ruZHu:7VtG5Oru3dIFbjY6kK6rSH

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\NEAS.ff41d6424f11505c3840012b55703380.exe
    "C:\Users\Admin\AppData\Local\Temp\NEAS.ff41d6424f11505c3840012b55703380.exe"
    1⤵
      PID:5028

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/5028-0-0x00000269AAC70000-0x00000269AAE50000-memory.dmp

      Filesize

      1.9MB

    • memory/5028-1-0x00007FFAAD370000-0x00007FFAADE31000-memory.dmp

      Filesize

      10.8MB

    • memory/5028-2-0x00000269C54A0000-0x00000269C54B0000-memory.dmp

      Filesize

      64KB

    • memory/5028-3-0x00000269AB1F0000-0x00000269AB20A000-memory.dmp

      Filesize

      104KB

    • memory/5028-4-0x00000269AB220000-0x00000269AB236000-memory.dmp

      Filesize

      88KB

    • memory/5028-5-0x00000269AB240000-0x00000269AB24A000-memory.dmp

      Filesize

      40KB

    • memory/5028-6-0x00000269AB250000-0x00000269AB258000-memory.dmp

      Filesize

      32KB

    • memory/5028-7-0x00000269AB230000-0x00000269AB23A000-memory.dmp

      Filesize

      40KB

    • memory/5028-8-0x00000269AB280000-0x00000269AB288000-memory.dmp

      Filesize

      32KB

    • memory/5028-9-0x00000269AB2A0000-0x00000269AB2A8000-memory.dmp

      Filesize

      32KB

    • memory/5028-10-0x00000269AB290000-0x00000269AB298000-memory.dmp

      Filesize

      32KB

    • memory/5028-11-0x00000269AB390000-0x00000269AB398000-memory.dmp

      Filesize

      32KB

    • memory/5028-12-0x00000269C65E0000-0x00000269C6738000-memory.dmp

      Filesize

      1.3MB

    • memory/5028-13-0x00000269C54B0000-0x00000269C54FA000-memory.dmp

      Filesize

      296KB

    • memory/5028-14-0x00000269AB3A0000-0x00000269AB3A8000-memory.dmp

      Filesize

      32KB

    • memory/5028-15-0x00000269AB3B0000-0x00000269AB3B8000-memory.dmp

      Filesize

      32KB

    • memory/5028-16-0x00000269C5440000-0x00000269C5448000-memory.dmp

      Filesize

      32KB

    • memory/5028-17-0x00000269AB2C0000-0x00000269AB2D0000-memory.dmp

      Filesize

      64KB

    • memory/5028-18-0x00000269C5460000-0x00000269C5468000-memory.dmp

      Filesize

      32KB

    • memory/5028-19-0x00000269C5470000-0x00000269C5478000-memory.dmp

      Filesize

      32KB

    • memory/5028-20-0x00000269C5480000-0x00000269C5488000-memory.dmp

      Filesize

      32KB

    • memory/5028-21-0x00000269C8C10000-0x00000269C8C18000-memory.dmp

      Filesize

      32KB

    • memory/5028-22-0x00000269C54A0000-0x00000269C54B0000-memory.dmp

      Filesize

      64KB

    • memory/5028-23-0x00007FFAAD370000-0x00007FFAADE31000-memory.dmp

      Filesize

      10.8MB

    • memory/5028-24-0x00000269C54A0000-0x00000269C54B0000-memory.dmp

      Filesize

      64KB

    • memory/5028-25-0x00000269C54A0000-0x00000269C54B0000-memory.dmp

      Filesize

      64KB

    • memory/5028-26-0x00007FFAAD370000-0x00007FFAADE31000-memory.dmp

      Filesize

      10.8MB