Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    7s
  • max time network
    35s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    15/10/2023, 19:44

General

  • Target

    bc675ee293d5978a252b24f14de932e0_exe32.exe

  • Size

    239KB

  • MD5

    bc675ee293d5978a252b24f14de932e0

  • SHA1

    e3fa4486fdceaa06333577dc0f1712a57acdcd70

  • SHA256

    f41c2bbd455b39892286304d234513c4862e4405eb61038792bbab296d59fc66

  • SHA512

    bca2b3661e04375e5819f947eec18d6493cea1952854a1fcf08608626415f7e3da9c366413ebb2f06681bf4b85677cb8d87d104445e59686cbb41ba809898e05

  • SSDEEP

    6144:8pg4rIvq5V8RjeJ3UolYrllUwXd3XrJKRXYUU:8pgNvqV8NA3NyRdNnWYUU

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Drops file in Program Files directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\bc675ee293d5978a252b24f14de932e0_exe32.exe
    "C:\Users\Admin\AppData\Local\Temp\bc675ee293d5978a252b24f14de932e0_exe32.exe"
    1⤵
    • Drops file in Program Files directory
    PID:3028
  • C:\PROGRA~3\Mozilla\xxmjpmn.exe
    C:\PROGRA~3\Mozilla\xxmjpmn.exe -nznotnb
    1⤵
    • Executes dropped EXE
    PID:4228

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\PROGRA~3\Mozilla\xxmjpmn.exe

    Filesize

    239KB

    MD5

    9522cbd204853b9eaa05e75b73cd53d5

    SHA1

    46de22022b424b598a88f30afb5822107174f2ff

    SHA256

    c345f45ffbc0b16548da74f59305ef69c52361293c2131d21e4097039cbe82fe

    SHA512

    2091d2723f4f239f7ae19af279735d595127ce92431ca8f0835241958a488c1df4d92b48c5d03cbe2022ae160953a16e4c994ee9e08e2a625bbf933d3991155b

  • C:\ProgramData\Mozilla\xxmjpmn.exe

    Filesize

    239KB

    MD5

    9522cbd204853b9eaa05e75b73cd53d5

    SHA1

    46de22022b424b598a88f30afb5822107174f2ff

    SHA256

    c345f45ffbc0b16548da74f59305ef69c52361293c2131d21e4097039cbe82fe

    SHA512

    2091d2723f4f239f7ae19af279735d595127ce92431ca8f0835241958a488c1df4d92b48c5d03cbe2022ae160953a16e4c994ee9e08e2a625bbf933d3991155b

  • memory/3028-0-0x0000000000400000-0x000000000045E000-memory.dmp

    Filesize

    376KB

  • memory/3028-1-0x0000000000640000-0x000000000069B000-memory.dmp

    Filesize

    364KB

  • memory/3028-2-0x0000000000400000-0x000000000045B000-memory.dmp

    Filesize

    364KB

  • memory/3028-6-0x0000000000400000-0x000000000045B000-memory.dmp

    Filesize

    364KB

  • memory/3028-8-0x0000000000640000-0x000000000069B000-memory.dmp

    Filesize

    364KB

  • memory/4228-9-0x0000000000D90000-0x0000000000DEB000-memory.dmp

    Filesize

    364KB