Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
181s -
max time network
202s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
24/12/2023, 18:03
General
-
Target
0a5f0524256e174c89a5b042aee3db95.exe
-
Size
105KB
-
MD5
0a5f0524256e174c89a5b042aee3db95
-
SHA1
732426aab033ee27637d6cf351bc3fce49572533
-
SHA256
cf88ac1179baa08af510960cd85d998673ee45891bfb2dc4eb20555c5a8104c0
-
SHA512
f901149482507b68801afba13b9eac1ba96d0a23f32754d74669235f7693ea1144d6c631840a27bd791eabaa15f9356ce288d085a1d773a03d66754e5f019d8b
-
SSDEEP
3072:Cs/zt8dHEOwnbiinLU/UCxOcxW5pvpW9i:ZuwnbHoxOcczvY4
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0a5f0524256e174c89a5b042aee3db95.exe"C:\Users\Admin\AppData\Local\Temp\0a5f0524256e174c89a5b042aee3db95.exe"1⤵
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\0a5f0524256e174c89a5b042aee3db95.exeC:\Users\Admin\AppData\Local\Temp\0a5f0524256e174c89a5b042aee3db95.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
105KB
MD560338c54ae8bfa7943bea68927fd0b4d
SHA1e2888ed4a2269ea270150ffa75defb52d1d82290
SHA256f4b1b81f2be15cd472a4189cba78b0e52eac431e4b7798756df1728f73a28c4e
SHA5124e8a3e7862bc41557bf86cbca02e6c23605797e3e2a53cc8b83b556cc912c000ee0dc9c645daf31e79f64140fb609687e03b9bd1b92996fb90f91e22c1f1ebfb
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
56KB
-
Filesize
108KB