Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
82s -
max time network
80s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system -
submitted
13/11/2023, 22:47
Static task
static1
Behavioral task
behavioral1
Sample
f9c8eadc0d919cd7dac397b7c9d3c25b2f78bc0702ce6397f1a18d4b6a546000.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
f9c8eadc0d919cd7dac397b7c9d3c25b2f78bc0702ce6397f1a18d4b6a546000.exe
Resource
win10v2004-20231020-en
General
-
Target
f9c8eadc0d919cd7dac397b7c9d3c25b2f78bc0702ce6397f1a18d4b6a546000.exe
-
Size
145KB
-
MD5
9301b2801f31b9118f1b51029e4e3af1
-
SHA1
25751cb0b7f4eb5a4ebe3d47fbdeaf283eac9a1c
-
SHA256
f9c8eadc0d919cd7dac397b7c9d3c25b2f78bc0702ce6397f1a18d4b6a546000
-
SHA512
aca793a343a5578847c47af11366074cc427fef54c63c5c416c960b30ce0f0c3e696e913d1fb2e473500af3ecc9531a17e6a14e072387bfe06ddcfcd475652ef
-
SSDEEP
3072:4L1MX4+ZLpLcydC6M0YNyQJfm7LWU0CxcePOMixvpss8z/qoutXL:4L1MxLc36WzJO7qdIchXuscqoSb
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/2188-1-0x0000000010000000-0x000000001006D000-memory.dmp upx behavioral2/memory/2188-0-0x0000000010000000-0x000000001006D000-memory.dmp upx behavioral2/memory/2188-39-0x0000000010000000-0x000000001006D000-memory.dmp upx
Processes
-
C:\Users\Admin\AppData\Local\Temp\f9c8eadc0d919cd7dac397b7c9d3c25b2f78bc0702ce6397f1a18d4b6a546000.exe"C:\Users\Admin\AppData\Local\Temp\f9c8eadc0d919cd7dac397b7c9d3c25b2f78bc0702ce6397f1a18d4b6a546000.exe"1⤵PID:2188
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵PID:232
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵PID:1540
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
16KB
MD5b34cd7cbfb612e8f8bb2430af4b79a45
SHA121b04e46d206b0f0b0ca6bd4f1bb0fa47d752a23
SHA256f46858115fa0ccfab3f089d3c5cf7c31a430c83369a93d1fcb0421e1cb027b36
SHA5126f97801ad3bb5c8054ff41c20775562b84d20f7084086f956c5bc80f8fe908ac522216e459eec8ce48d924c452aecbd1f077afdb33a60633bf5ecdb0bba7b9a6