Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    148s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25/12/2023, 01:13

General

  • Target

    1fa425a86333932387162495bf386864.exe

  • Size

    452KB

  • MD5

    1fa425a86333932387162495bf386864

  • SHA1

    bf86afdafd20a981103a3e13f5df7e472e4af7dc

  • SHA256

    111bbc33f8849677492f94d0ad914e471c6fb587af2c9a88731a43739cf03f35

  • SHA512

    eb946c9260b798f08c545e5e7b859d3be34a1cbf714b2065e99eea34ca9b6e9c7722e78d86374a6097918a3af6b0f5ea5306fd31ecb772cb3ec15300692183e6

  • SSDEEP

    6144:yhK0ckunkeMDhY09Fnq9JwLmqwY1llH4gDeT+RJwS8Q2qo0FNCnHFTM2Tfk32xoE:6cRkLDCEkJwKqw442eHG1sN36q

Score
7/10

Malware Config

Signatures

  • Drops startup file 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\1fa425a86333932387162495bf386864.exe
    "C:\Users\Admin\AppData\Local\Temp\1fa425a86333932387162495bf386864.exe"
    1⤵
    • Drops startup file
    PID:3252

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3252-0-0x00000000007D0000-0x00000000007D2000-memory.dmp

    Filesize

    8KB

  • memory/3252-1-0x00000000007E0000-0x00000000007E1000-memory.dmp

    Filesize

    4KB

  • memory/3252-3-0x0000000000EA0000-0x0000000000EA1000-memory.dmp

    Filesize

    4KB

  • memory/3252-2-0x0000000000E80000-0x0000000000E81000-memory.dmp

    Filesize

    4KB

  • memory/3252-4-0x0000000000EB0000-0x0000000000EB1000-memory.dmp

    Filesize

    4KB

  • memory/3252-5-0x0000000000ED0000-0x0000000000ED1000-memory.dmp

    Filesize

    4KB

  • memory/3252-7-0x0000000000F30000-0x0000000000F31000-memory.dmp

    Filesize

    4KB

  • memory/3252-6-0x0000000001160000-0x0000000001186000-memory.dmp

    Filesize

    152KB

  • memory/3252-9-0x0000000000F50000-0x0000000000F51000-memory.dmp

    Filesize

    4KB

  • memory/3252-13-0x0000000000F70000-0x0000000000F71000-memory.dmp

    Filesize

    4KB

  • memory/3252-16-0x0000000001150000-0x0000000001151000-memory.dmp

    Filesize

    4KB

  • memory/3252-29-0x0000000003460000-0x0000000003461000-memory.dmp

    Filesize

    4KB

  • memory/3252-30-0x00000000034E0000-0x00000000034E1000-memory.dmp

    Filesize

    4KB

  • memory/3252-31-0x0000000003830000-0x0000000003831000-memory.dmp

    Filesize

    4KB

  • memory/3252-28-0x0000000000FA0000-0x0000000000FA1000-memory.dmp

    Filesize

    4KB

  • memory/3252-27-0x0000000000EC0000-0x0000000000EC1000-memory.dmp

    Filesize

    4KB

  • memory/3252-26-0x00000000034D0000-0x00000000034D1000-memory.dmp

    Filesize

    4KB

  • memory/3252-25-0x00000000034C0000-0x00000000034C1000-memory.dmp

    Filesize

    4KB

  • memory/3252-24-0x0000000003470000-0x0000000003471000-memory.dmp

    Filesize

    4KB

  • memory/3252-23-0x00000000034B0000-0x00000000034B1000-memory.dmp

    Filesize

    4KB

  • memory/3252-22-0x00000000034A0000-0x00000000034A1000-memory.dmp

    Filesize

    4KB

  • memory/3252-21-0x0000000003490000-0x0000000003491000-memory.dmp

    Filesize

    4KB

  • memory/3252-20-0x0000000003480000-0x0000000003481000-memory.dmp

    Filesize

    4KB

  • memory/3252-19-0x0000000003450000-0x0000000003451000-memory.dmp

    Filesize

    4KB

  • memory/3252-18-0x0000000000F20000-0x0000000000F22000-memory.dmp

    Filesize

    8KB

  • memory/3252-17-0x0000000001190000-0x0000000001191000-memory.dmp

    Filesize

    4KB

  • memory/3252-15-0x0000000000F90000-0x0000000000F91000-memory.dmp

    Filesize

    4KB

  • memory/3252-14-0x0000000000F80000-0x0000000000F81000-memory.dmp

    Filesize

    4KB

  • memory/3252-12-0x0000000000F60000-0x0000000000F61000-memory.dmp

    Filesize

    4KB