Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25/12/2023, 00:46

General

  • Target

    1dfb4db77038312255f9cf729771ef5e.exe

  • Size

    312KB

  • MD5

    1dfb4db77038312255f9cf729771ef5e

  • SHA1

    d709498322d84002950aeec006ce08658432301d

  • SHA256

    50f8e86349f1b680a437dfa94f47454a320576f007c6fd1f7c3d033cdda49722

  • SHA512

    4b4edae765ec195390935d5bcca5c486fcd8f9222de5342d58682b6a0e2d357e9388ac4d712741eaf9d363766a18779da868199d7e318510a430cb1649ee09f7

  • SSDEEP

    6144:Trnm9UarEuMEvjr24HtrxTUGFVENUpvzRj70+UwIn7Zz+blDkbnTsY2S:Trnm9jEsX2utrxAG7ENS7bO7sblAUY2S

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1dfb4db77038312255f9cf729771ef5e.exe
    "C:\Users\Admin\AppData\Local\Temp\1dfb4db77038312255f9cf729771ef5e.exe"
    1⤵
    • Loads dropped DLL
    PID:2484

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\Tsu9FDFF5FB.dll

    Filesize

    267KB

    MD5

    d1ddd2bed23dd1e6a70855f5f7ba3e7b

    SHA1

    7c75eacc13fc2f225dfa9820ea306f6bbc891516

    SHA256

    e6f6af10a5d9496fda5f06b1dbc23f64ccda396b2fc219fd2464851edc003ba5

    SHA512

    d9647b1beffe978ef999e59417fbd6e9ce7fa7efbce690ce2039dd14bffbbdf8e18f56a529f1ce362a47b0b49121085afc6981e15b9177a3672e40de099369e1

  • C:\Users\Admin\AppData\Local\Temp\{CBF85DBC-D57D-47B6-A55D-9D5F101B7F4A}\_Setup.dll

    Filesize

    150KB

    MD5

    5aa1aa0c39e06fbff4453ea20635aae6

    SHA1

    88a04b4de588d0ae1911c70d23ede0b9d62aebc0

    SHA256

    d20c2a00bc1995edeb1ead7c02875584667d1e1eb9d338fb039a8f3132d64d70

    SHA512

    c5b9dfb88c45beb78ab387375ecff0dc27b4b0da486de955b9c3b8be7386a1e14f53e3f088cc2025f03354f2e53a1a2a24419b41e283f7c2c9d7a964545c3101

  • C:\Users\Admin\AppData\Local\Temp\{CBF85DBC-D57D-47B6-A55D-9D5F101B7F4A}\_Setupx.dll

    Filesize

    57KB

    MD5

    68003aaf2a1efe1a74d1d116208f8a98

    SHA1

    b9d494f766572c502f97d7eca2e6763e764e2986

    SHA256

    75585e46cdd212c0341eb2363b5df105d3783407dac4bc52946de8e70791431a

    SHA512

    6845f3e264e7414aa822d97a9d5039edd6dec0c88727098eadc56f8d466ef8c7f05eb670742ffa9541318005fda165f7a1b56767f9a739555369065636367c3f