Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    135s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23/12/2023, 11:18

General

  • Target

    DiscordChatExporter.exe

  • Size

    112KB

  • MD5

    253f84b2501dcc3b1b6776cee4b1a94b

  • SHA1

    5a75abcc31caa3ed08f547ac6dad6ba3e8387c41

  • SHA256

    c352d1bc24706eda14c70c95e03fb8569e17baa48207c6f3b182fd59b4eb1aa7

  • SHA512

    5009aac31dffaa0b3e7e74645bf4c24d6f0327c3bf7385b1a41de9d67620c20588e7a67ca545efed100cb8152d7e46b7fa3b17c4ce33e275e7ceab79459ed1a0

  • SSDEEP

    1536:I0u1j77FKQutQQ8KGw69pvgZWPvSQ8jIVrTRRdH+klzjhywurf:YIFt9L69pvgZWXSjmrTRH3zjhyl

Score
1/10

Malware Config

Signatures

  • Suspicious use of FindShellTrayWindow 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\DiscordChatExporter.exe
    "C:\Users\Admin\AppData\Local\Temp\DiscordChatExporter.exe"
    1⤵
    • Suspicious use of FindShellTrayWindow
    PID:2308

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2308-1-0x0000000000E20000-0x0000000000E30000-memory.dmp

    Filesize

    64KB

  • memory/2308-0-0x00007FFBDFC70000-0x00007FFBE0611000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-2-0x00007FFBDFC70000-0x00007FFBE0611000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-5-0x0000000000E20000-0x0000000000E30000-memory.dmp

    Filesize

    64KB

  • memory/2308-4-0x00007FFBDFC70000-0x00007FFBE0611000-memory.dmp

    Filesize

    9.6MB