Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
141s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
24/12/2023, 20:49
General
-
Target
11f0e9c5e823f34c03ae46220068f29b.exe
-
Size
238KB
-
MD5
11f0e9c5e823f34c03ae46220068f29b
-
SHA1
00578c936ebd94c7d72ed1a0d6c709a1f4001656
-
SHA256
45d6605ac9c1b1e888dca429805e15ef616bf42600fb1ac7bc1d55e037a1a70a
-
SHA512
e93ef8b8c483639be0921d531f627baa06c9d0fa635250fff41ccb82a0e85951349a909fb6b640c52aad22077c2d62fd8a24b9c368e01ecbdb2a16c3646a7520
-
SSDEEP
3072:R9vLuDchlt3CGwxZgib54b5hNyPlV+97kae4hsRvn7NmH1yjSQFaM20Gu6eA9Q:TviDclyGwxq5bfNc7TjSXMVE
Score
7/10
Malware Config
Signatures
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of UnmapMainImage 1 IoCs
-
Suspicious use of WriteProcessMemory 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\11f0e9c5e823f34c03ae46220068f29b.exe"C:\Users\Admin\AppData\Local\Temp\11f0e9c5e823f34c03ae46220068f29b.exe"1⤵
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\svchost.exesvchost.exe2⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
316KB
-
Filesize
4KB
-
Filesize
80KB
-
Filesize
168KB
-
Filesize
56KB
-
Filesize
80KB