Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
7s -
max time network
35s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
15/10/2023, 19:44
Static task
static1
Behavioral task
behavioral1
Sample
bc675ee293d5978a252b24f14de932e0_exe32.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
bc675ee293d5978a252b24f14de932e0_exe32.exe
Resource
win10v2004-20230915-en
General
-
Target
bc675ee293d5978a252b24f14de932e0_exe32.exe
-
Size
239KB
-
MD5
bc675ee293d5978a252b24f14de932e0
-
SHA1
e3fa4486fdceaa06333577dc0f1712a57acdcd70
-
SHA256
f41c2bbd455b39892286304d234513c4862e4405eb61038792bbab296d59fc66
-
SHA512
bca2b3661e04375e5819f947eec18d6493cea1952854a1fcf08608626415f7e3da9c366413ebb2f06681bf4b85677cb8d87d104445e59686cbb41ba809898e05
-
SSDEEP
6144:8pg4rIvq5V8RjeJ3UolYrllUwXd3XrJKRXYUU:8pgNvqV8NA3NyRdNnWYUU
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
pid Process 4228 xxmjpmn.exe -
Drops file in Program Files directory 1 IoCs
description ioc Process File created C:\PROGRA~3\Mozilla\xxmjpmn.exe bc675ee293d5978a252b24f14de932e0_exe32.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\bc675ee293d5978a252b24f14de932e0_exe32.exe"C:\Users\Admin\AppData\Local\Temp\bc675ee293d5978a252b24f14de932e0_exe32.exe"1⤵
- Drops file in Program Files directory
PID:3028
-
C:\PROGRA~3\Mozilla\xxmjpmn.exeC:\PROGRA~3\Mozilla\xxmjpmn.exe -nznotnb1⤵
- Executes dropped EXE
PID:4228
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
239KB
MD59522cbd204853b9eaa05e75b73cd53d5
SHA146de22022b424b598a88f30afb5822107174f2ff
SHA256c345f45ffbc0b16548da74f59305ef69c52361293c2131d21e4097039cbe82fe
SHA5122091d2723f4f239f7ae19af279735d595127ce92431ca8f0835241958a488c1df4d92b48c5d03cbe2022ae160953a16e4c994ee9e08e2a625bbf933d3991155b
-
Filesize
239KB
MD59522cbd204853b9eaa05e75b73cd53d5
SHA146de22022b424b598a88f30afb5822107174f2ff
SHA256c345f45ffbc0b16548da74f59305ef69c52361293c2131d21e4097039cbe82fe
SHA5122091d2723f4f239f7ae19af279735d595127ce92431ca8f0835241958a488c1df4d92b48c5d03cbe2022ae160953a16e4c994ee9e08e2a625bbf933d3991155b