Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    19s
  • max time network
    63s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22/12/2023, 16:30

General

  • Target

    f15c3ddaa833c3d4ca63421c56075609.exe

  • Size

    420KB

  • MD5

    f15c3ddaa833c3d4ca63421c56075609

  • SHA1

    abf07c11801b17e92e58867ab2c4399db353a10c

  • SHA256

    e3e74c36cf0d80ed4685d71f543906d8a05df085fa3a6fcc1a864c8266f57c10

  • SHA512

    cbf57f153e03e9c93e6b78c9d7ff8f8e2004c6dd5d7c1cb5d1d5b04181a25867ee356a385c7928e5345024605bd61afd43caa1ae3557476b39293292e38e953e

  • SSDEEP

    12288:3t6zTgq23yDK8vnU4FH1E6mrKrClBdCkUcHBXkL:yTS3yDK8vnfFH66mrKrClBhUcH0

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Runs .reg file with regedit 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f15c3ddaa833c3d4ca63421c56075609.exe
    "C:\Users\Admin\AppData\Local\Temp\f15c3ddaa833c3d4ca63421c56075609.exe"
    1⤵
      PID:5056
      • C:\Windows\regedit.exe
        "C:\Windows\regedit.exe" /s "C:\Users\Admin\AppData\Local\Temp\HZ$D.931.1919\sfx.reg"
        2⤵
        • Runs .reg file with regedit
        PID:1712

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Temp\HZ$D.931.1919\sfx.reg

      Filesize

      2KB

      MD5

      35929906a6944a2fdcb2dff2a77e71dd

      SHA1

      5b4397b8332529030f33f665b85a1a30cc405602

      SHA256

      fb2d7f14ab4b79615e68c6fba8f61d8807a62db8f5460628079ef3a6ab85d633

      SHA512

      1fa74b346658e31cb7574bdb4b920b4ac7c27a4ec4c44998b54287860b2fe86ca70154f87e5f13d01d7bb46125aa11f2e7dc4810360086ea7460057fa10e04ff