Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
14s -
max time network
36s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
22/12/2023, 04:12
Static task
static1
Behavioral task
behavioral1
Sample
614c4284526d0d7d8c71a4ba1336398d.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
614c4284526d0d7d8c71a4ba1336398d.exe
Resource
win10v2004-20231215-en
General
-
Target
614c4284526d0d7d8c71a4ba1336398d.exe
-
Size
27.1MB
-
MD5
614c4284526d0d7d8c71a4ba1336398d
-
SHA1
056c44900027275fa6b8761a9349c3cdbd829698
-
SHA256
128abe79834296e1a6b3572d3e5728ba0f1196b24bffbb52218ea0503f044cf8
-
SHA512
3aeb0c6cf59c5102a1690ce7e378b3fd51efb67c749e433e178a3c7cc7a5825cb2e092d949bbee0e9b47e3e52fe61432f77050b93d6ec1eb3d7fe73d054b8379
-
SSDEEP
98304:EcKUh+UMh+2Mh+PMh+Y+1+PMh+Y5PMh+Y+1+Mh+PMh+Y+1+PMh+Y5PMh+Y+d:Eu
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\614c4284526d0d7d8c71a4ba1336398d.exe"C:\Users\Admin\AppData\Local\Temp\614c4284526d0d7d8c71a4ba1336398d.exe"1⤵PID:1672
-
C:\Users\Admin\AppData\Local\Temp\qih.exeC:\Users\Admin\AppData\Local\Temp\qih.exe -run C:\Users\Admin\AppData\Local\Temp\614c4284526d0d7d8c71a4ba1336398d.exe2⤵PID:2288
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
42KB
MD533135d4990677464bf7adeb1fa61dedd
SHA1a103f385e3245d12c2b00b923652a90084a4e3e8
SHA2566b001461e27906c5f0d91f35503043399bb62b4b6d95a723d7c3a3fcafe4e335
SHA512242818e1b623c276ce29ea8ef5953e16d48af5effec926b631c75cb3025c1ceaf50b26b65d6b8de407d4c6b83983c20b572ac52c3184ff0a8088a273826c7d96
-
Filesize
37KB
MD51079f9c6c16179a26a1ad9914878a6a6
SHA1b01fb4ec0808e6c8b732b75a2d4c030126f4f527
SHA2568042a83f00ccac80a16458691ca62a0e8a8d9850653318421d833883cec71333
SHA5129c75aef403689a903a79baccf2d7e97978a47aed5a4032985f013f4dd63e04f1879be64673f350b51e25fd16fbdc73de6d3385ba6671446e8dfbf7e1075d4870