Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    148s
  • max time network
    168s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231020-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07/11/2023, 13:41

General

  • Target

    soldatserver.exe

  • Size

    438KB

  • MD5

    4cc52ec2a4baf5acf90fa9fb83313e54

  • SHA1

    0f27413f9705234b8f20ebb7913a48cba0cfea9a

  • SHA256

    0114b7614eff17ed9347c8c16160ff996189c22fc44009c8f859ece95d65df1d

  • SHA512

    8e785c648a87c6adfbe359dad59a2462b5cab96f2b48c0a89ee426b06e2247eec314157fcba4463c91fd2a692cf78e9fb8ad5e04dec1dcd65061b9836ae648bb

  • SSDEEP

    12288:A77/wWgEtslw4kUydEDloqIntGDA0+6BeULniEo62DPXG:AXYlEtePy1tGDd+6BeUdIP2

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 16 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\soldatserver.exe
    "C:\Users\Admin\AppData\Local\Temp\soldatserver.exe"
    1⤵
      PID:5044

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Temp\logs\ConsoleLog-23-11-07-01.txt

      Filesize

      417B

      MD5

      9983f4ada59a7026e41b8e5792896379

      SHA1

      9960ff952750c030624e2d498cc33d57ea91724f

      SHA256

      2339b4858ffa9e67d7bab9273b76075be8eacd0c5d26b72a934ab56170a31d9e

      SHA512

      e705e4e543c42ce50e6d766b20b3c2bad1b4b0f77517502009c2295400ca5c67575bcb94e7395fa2f002fb00e3f2c866353aa7794248f14fd6e48863729fc166

    • C:\Users\Admin\AppData\Local\Temp\logs\Log-23-11-07-01.txt

      Filesize

      430B

      MD5

      bb7ca8140ad5e42b3c18c87727a4413d

      SHA1

      e905935150bc714c447701fe4c444f42da113843

      SHA256

      80ac94c335adfe1c1841192322650071fb53e0c5cc92f4a7f94476f300130e8e

      SHA512

      a7e221ec4b7ee5229a9e524a2d526c38184b3b14b8a6624bac51adcdd0c4abd2bcbd4151f003a977fc1012c74a838a01e729ea4545d5211710fb8d51e7621bf3

    • C:\Users\Admin\AppData\Local\Temp\logs\kills\KillLog-23-11-07-01.txt

      Filesize

      39B

      MD5

      52959c8f3b0d65bf260ee6d58f4fc455

      SHA1

      7cbc2d1f7c61fe854f2e57be4bab662f346ca3e8

      SHA256

      35ec197714b1ee414879c3df347307ceaddf83052471178c88d5f3878c0bf28e

      SHA512

      486d029f9fedf1fc80db50120b476cf9a3bef568ed2c2b4d461f459814e2cd7be80dc53918b8dd81734a06de4be057a746f84713a142ccc205e0ac52b2a0d803

    • memory/5044-35-0x0000000000400000-0x0000000000C0E000-memory.dmp

      Filesize

      8.1MB

    • memory/5044-53-0x0000000000400000-0x0000000000C0E000-memory.dmp

      Filesize

      8.1MB

    • memory/5044-26-0x0000000000400000-0x0000000000C0E000-memory.dmp

      Filesize

      8.1MB

    • memory/5044-12-0x0000000000400000-0x0000000000C0E000-memory.dmp

      Filesize

      8.1MB

    • memory/5044-11-0x0000000000400000-0x0000000000C0E000-memory.dmp

      Filesize

      8.1MB

    • memory/5044-0-0x0000000000400000-0x0000000000C0E000-memory.dmp

      Filesize

      8.1MB

    • memory/5044-44-0x0000000000400000-0x0000000000C0E000-memory.dmp

      Filesize

      8.1MB

    • memory/5044-17-0x0000000000400000-0x0000000000C0E000-memory.dmp

      Filesize

      8.1MB

    • memory/5044-62-0x0000000000400000-0x0000000000C0E000-memory.dmp

      Filesize

      8.1MB

    • memory/5044-71-0x0000000000400000-0x0000000000C0E000-memory.dmp

      Filesize

      8.1MB

    • memory/5044-80-0x0000000000400000-0x0000000000C0E000-memory.dmp

      Filesize

      8.1MB

    • memory/5044-89-0x0000000000400000-0x0000000000C0E000-memory.dmp

      Filesize

      8.1MB

    • memory/5044-98-0x0000000000400000-0x0000000000C0E000-memory.dmp

      Filesize

      8.1MB

    • memory/5044-103-0x0000000000400000-0x0000000000C0E000-memory.dmp

      Filesize

      8.1MB

    • memory/5044-112-0x0000000000400000-0x0000000000C0E000-memory.dmp

      Filesize

      8.1MB

    • memory/5044-121-0x0000000000400000-0x0000000000C0E000-memory.dmp

      Filesize

      8.1MB