Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
112s -
max time network
96s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
25/12/2023, 05:42
General
-
Target
08da3f4a0b49390561b5afad69bd726a.exe
-
Size
57KB
-
MD5
08da3f4a0b49390561b5afad69bd726a
-
SHA1
26d9c048c64ebe8016be6167813303c25f29ba2b
-
SHA256
20cec41db40eb70397e8089839f1d87971ff56158e1a6285a4b1c874195ab1e4
-
SHA512
f2d632a5859f56cea17208999c2fdb3b238af7b70faa50e052c2dfeb20c9ee2f24406444feb510d81dd514c632f0b4b13fcca8b544da99813df2333f1b5a14a5
-
SSDEEP
768:qVgcrhkj33w5x+ZVYvX4IIDlDKZ+M96Sx8PneQCRvU590jyqnYnYJbiqwFvzZ+:GgF3gwVYgDl5GRx84RvU59Ooycvg
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\08da3f4a0b49390561b5afad69bd726a.exe"C:\Users\Admin\AppData\Local\Temp\08da3f4a0b49390561b5afad69bd726a.exe"1⤵
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\08da3f4a0b49390561b5afad69bd726a.exeC:\Users\Admin\AppData\Local\Temp\08da3f4a0b49390561b5afad69bd726a.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
18KB
MD587985d6a25589d731e90efc17de26d30
SHA119cde0a66e8eae1eba6da218d015d3c6f319353b
SHA256a85f93e144028125fb333cd3b3cdf1a1b81de78e6db8023fcd82d308a77c4731
SHA51268e1c73b3de03b751af8ced5cbe9de2fbcc00f1ab98ca1ebe8fce421bcb963e46d702466964298d604f05017da8546f44d8765daaa34779bb555f9c7bf2f25ed
-
Filesize
176KB
-
Filesize
108KB
-
Filesize
108KB
-
Filesize
176KB
-
Filesize
108KB
-
Filesize
108KB
-
Filesize
56KB
-
Filesize
176KB
-
Filesize
176KB
-
Filesize
176KB