Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    12s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24/12/2023, 14:50

General

  • Target

    023832845d2507e2bd62832d44fc091c.exe

  • Size

    1.8MB

  • MD5

    023832845d2507e2bd62832d44fc091c

  • SHA1

    fd1707fb8c54d46343427b0e4661de57ceb6a0eb

  • SHA256

    895cc7b9833f33e7814f9e5aeb60505ef41b0d300f853660be0d39e17db2d67e

  • SHA512

    92af5fb04d964301f96fec6b7f9b47197025caf95edb0680a3a7d987c6ffe5c1c49491a04d9e5ec67fee23d5508a9d96470cdba4798a8b34702a860972b779ab

  • SSDEEP

    24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7Nxqw:SCqm2Jpr0nNM7Dus7Nxp

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 10 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Drops file in Program Files directory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\023832845d2507e2bd62832d44fc091c.exe
    "C:\Users\Admin\AppData\Local\Temp\023832845d2507e2bd62832d44fc091c.exe"
    1⤵
    • Drops file in Program Files directory
    PID:3516

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Program Files\7-Zip\7-zip32.dll

    Filesize

    129KB

    MD5

    b0b238ca70413271cc298655340a0b32

    SHA1

    99a6977218583c718b74e74c1c27df9df8b2f7ee

    SHA256

    f57249dfdac0de77c3ea99e966642fcdd95b2a0b43f4f9267eaaa86ebd20bc4c

    SHA512

    9b30fbf7067ea334bc7690e54f3a2f95b3ec2dcb736540d74b4f24c7dff343ac37183eb1b0995d99f6706983a20d1cc6651181e18d6a1f12bcd5b3fd1a9d5a88

  • C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\msoshext.dll

    Filesize

    350KB

    MD5

    5cbcdd8c3667588c9f6de23000aec26b

    SHA1

    7e2bc7481f37a18ff84ac8d424f03e7c073f70b7

    SHA256

    d4b4adc96e2dd1b32357f1d785399727a2637dc758804a264039c7cb76a51582

    SHA512

    e73bcfc71549a94fc4c9aaa7aac64183c1fb98bc75e3fa2b260583c26f8cbb50189831954f63f4a4678ea6cd5498d2a66967acf332d0d66f98950ff07b72cac9

  • C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\msoshext.dll

    Filesize

    1KB

    MD5

    b2137d95f05ce3a88174d28d7502383f

    SHA1

    4d8bf0ba77a6828d0a951949cc7aa2540d616900

    SHA256

    69125a5ff0fd84f7cf40ff20f1be93b08032de5df50a7334e39a60c481cb6948

    SHA512

    4d1562f7f65d4fd6e28bb2747fc1bac7f0d7b1055f495ee4010ec23ab422d6acdac3fc2f3220d4e0742a90950959a12c0e3f026c2b937ddf089f372b6152cd81

  • C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\msoshext.dll

    Filesize

    324KB

    MD5

    1c0fad922e1892cecddfb88933a669ff

    SHA1

    3d9b8087f5ca6f2ea7adf1c39ca9531dabe59429

    SHA256

    6c823a843e34451fd5047201250e5936902909c40fe05907387d1b3a3f3c7549

    SHA512

    972ea7df9ed31cdc91a030f4b41a3a8ccd0aea86610eecb795456f5e4469e9b508760c65853577617134b95dcd049e1371cdb6f62e05d67069da4c58f250ad3e

  • C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\msoshext.dll

    Filesize

    432KB

    MD5

    8aec731642e02dc033f2f43dfb6dbc47

    SHA1

    1bd00aeff9a7291249a5052b811261ccc9a687a2

    SHA256

    63c3672e72783837c22a7b3846881d440a43d5ba6f7c7aa527fea3386ab26708

    SHA512

    3c19c4c04ab32e160aa7a529473353654d0a05d58b016fc260c04a916a30ae6898c6cf533f4f4a3c1e01a94aa7054c5eb69a063b4337d24894eacce74c5b3e39

  • C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\msoshext.dll

    Filesize

    308KB

    MD5

    698e5326bf725f90c87103baf08d2086

    SHA1

    551a0fc5be9ff5e0c2250a6856ec7a7e98917e70

    SHA256

    aeb73f701feec7777e2631c22fc0d8eb618994c2a027c89a3fa9bf31272d440d

    SHA512

    cc3ef536e6eb1e3f408f101c98ce01e1555755ffed5ca8e208ce528864dca4c9f286e0993e9dd9212e56894340bb83be8bdfd5d6ddd340257b374020a6d28f61

  • memory/3516-0-0x0000000000400000-0x00000000005BA000-memory.dmp

    Filesize

    1.7MB

  • memory/3516-5293-0x0000000000400000-0x00000000005BA000-memory.dmp

    Filesize

    1.7MB

  • memory/3516-13405-0x0000000000400000-0x00000000005BA000-memory.dmp

    Filesize

    1.7MB