Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    143s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231020-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24/11/2023, 18:42

General

  • Target

    invi.exe

  • Size

    272KB

  • MD5

    97f5b24ca6ef0a8769ee2c55e98806b4

  • SHA1

    068622513f2ae97f5f0ac2d333900045a7e01062

  • SHA256

    4312c7f12ac9c648b395c16ddba44f2aab08e47054707a5af5f19ad486072843

  • SHA512

    1d843a166584d578f99f8a6c8c2775a551a5f08f5070e1a2e29be11575e4d4d99c6f171513d81d390c61147316baeef09ab47c37d3ed082188e40893d4deef40

  • SSDEEP

    6144:ekZt0FXSr6fiXCid450ZQ8riRoLd2uv0KyR:emt0GXCidHySdbHg

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\invi.exe
    "C:\Users\Admin\AppData\Local\Temp\invi.exe"
    1⤵
      PID:2228
    • C:\Windows\system32\WerFault.exe
      "C:\Windows\system32\WerFault.exe" -k -lc NDIS NDIS-20231124-1844.dmp
      1⤵
        PID:680

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • C:\Users\Admin\AppData\Local\Temp\Inveigh-Log.txt

        Filesize

        768B

        MD5

        33919671cc5b19ae9e06343b8e594343

        SHA1

        9c354592cff65af969364eaf94f6e2946019b7bd

        SHA256

        320630eac15def7dcfd348f4a6b5d1c41eeb5e14c53e2ce613b34035baa9d6e7

        SHA512

        12ef53c430aa5c73b2f0f3c20e1f718dcb60b505433d8722d94cbd6887a46b2aad35ad0ecd7b2b29638c7992b1f97513e8328dd210d99c17db21667caf6ae933

      • memory/2228-0-0x00007FFA403B0000-0x00007FFA40D51000-memory.dmp

        Filesize

        9.6MB

      • memory/2228-1-0x00007FFA403B0000-0x00007FFA40D51000-memory.dmp

        Filesize

        9.6MB

      • memory/2228-2-0x0000000001570000-0x0000000001580000-memory.dmp

        Filesize

        64KB

      • memory/2228-23-0x00007FFA403B0000-0x00007FFA40D51000-memory.dmp

        Filesize

        9.6MB

      • memory/2228-24-0x00007FFA403B0000-0x00007FFA40D51000-memory.dmp

        Filesize

        9.6MB

      • memory/2228-25-0x0000000001570000-0x0000000001580000-memory.dmp

        Filesize

        64KB