Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    140s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231020-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04/11/2023, 10:09

General

  • Target

    NEAS.6a4806b243cd361b232fee77d06c5d00_JC.exe

  • Size

    336KB

  • MD5

    6a4806b243cd361b232fee77d06c5d00

  • SHA1

    6c325dafa8e3397055936f1f5544f4e13bed4033

  • SHA256

    8b8957750bbcf5df20035693402fd4a69466d3340d5503a062e1f2cc86d95d9d

  • SHA512

    89ae06564176db12b45995be8373843d663ee0f2a3b130c6637213fac023784ee94f03c77db30b9b62913bedc27356726abc07c7af9cefb50465ae7efbc92604

  • SSDEEP

    3072:abJ8MJJ/pZ22HPc+Q0j40UvWw48ddLM6hMLIokjwrhpcSvMpE1:s5XG20ka48ddLM6njNSR1

Score
8/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\NEAS.6a4806b243cd361b232fee77d06c5d00_JC.exe
    "C:\Users\Admin\AppData\Local\Temp\NEAS.6a4806b243cd361b232fee77d06c5d00_JC.exe"
    1⤵
    • Drops file in Program Files directory
    PID:2608
  • C:\PROGRA~3\Mozilla\gpypjxc.exe
    C:\PROGRA~3\Mozilla\gpypjxc.exe -tripsff
    1⤵
    • Executes dropped EXE
    • Drops file in Program Files directory
    PID:2468

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\PROGRA~3\Mozilla\gpypjxc.exe

    Filesize

    336KB

    MD5

    04c528dfc671d5c5419993f764510f34

    SHA1

    28369d39b8c3a9f1f8cb5afeaba3f7cce2f5ebea

    SHA256

    84977becedd4c154d2a56d0bbdb6b1bdac56da322bcd45ba2dcaaf238e9d6cc8

    SHA512

    b795e18e64dcdbd14613ce5f4a555988ac3b9ac1dd33a885a74ace35f7d3bbb7392c7dbc311e6ff602432a83861cd94f872597b7314205e7565ba62001bea794

  • C:\ProgramData\Mozilla\gpypjxc.exe

    Filesize

    336KB

    MD5

    04c528dfc671d5c5419993f764510f34

    SHA1

    28369d39b8c3a9f1f8cb5afeaba3f7cce2f5ebea

    SHA256

    84977becedd4c154d2a56d0bbdb6b1bdac56da322bcd45ba2dcaaf238e9d6cc8

    SHA512

    b795e18e64dcdbd14613ce5f4a555988ac3b9ac1dd33a885a74ace35f7d3bbb7392c7dbc311e6ff602432a83861cd94f872597b7314205e7565ba62001bea794

  • memory/2468-5-0x0000000000C50000-0x0000000000CAB000-memory.dmp

    Filesize

    364KB

  • memory/2468-6-0x0000000000400000-0x000000000045B000-memory.dmp

    Filesize

    364KB

  • memory/2468-11-0x0000000000400000-0x000000000045B000-memory.dmp

    Filesize

    364KB

  • memory/2468-13-0x0000000000C50000-0x0000000000CAB000-memory.dmp

    Filesize

    364KB

  • memory/2608-0-0x0000000002150000-0x00000000021AB000-memory.dmp

    Filesize

    364KB

  • memory/2608-1-0x0000000000400000-0x000000000045B000-memory.dmp

    Filesize

    364KB

  • memory/2608-7-0x0000000000400000-0x000000000045B000-memory.dmp

    Filesize

    364KB

  • memory/2608-9-0x0000000002150000-0x00000000021AB000-memory.dmp

    Filesize

    364KB