Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    148s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25/12/2023, 08:26

General

  • Target

    11ef17e993626c9ffd229d0ad329e5a9.exe

  • Size

    602KB

  • MD5

    11ef17e993626c9ffd229d0ad329e5a9

  • SHA1

    87d6223b3a3c14f380da1a5e581c124a78f0e8aa

  • SHA256

    32f8af57fdfb2cc83432fb295ba83f09d8d3c70bd3062fb4b26f8a501fd83009

  • SHA512

    cf7b5ee0b60a8d173d94af966bee61aa33c965c3b73bbf503718b4a5f4d06c62142e6165e8de1194827fd880d26140bc8e2a231ca133a2c40816caca24664912

  • SSDEEP

    12288:xmkaMWNGlM8sso58vxLSfQ2kPmUMILeJShM14SRBrMoip:xfkNr8YQWfQTPmAyJ+M+SRBrM

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Drops file in Program Files directory 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\11ef17e993626c9ffd229d0ad329e5a9.exe
    "C:\Users\Admin\AppData\Local\Temp\11ef17e993626c9ffd229d0ad329e5a9.exe"
    1⤵
    • Drops file in Program Files directory
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    PID:2924

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\ish240600734\css\sdk-ui\progress-bar.css

    Filesize

    632B

    MD5

    8f6a2e09ace79158461b82d74ff6c7fd

    SHA1

    88f079fd001feb2cb302565b87fdb81c8995dd93

    SHA256

    b4bee76334ab9b4b0bdd2bff1b3f3a7b30d2e758bb8d4c6e457c9594bb62960c

    SHA512

    869305ea12f21564e56882fef318cdc21f88715f894e8140ae6b2cf3137a4c2002a34f2f8ae2719f770e2d0c892244b5e5f3229f1382e799dd309f52657cb98e

  • C:\Users\Admin\AppData\Local\Temp\ish240600734\images\Bg.gif

    Filesize

    20KB

    MD5

    94d82a50272a4423dca66ae32e0602ca

    SHA1

    18a1300c684442bffb41dcba54d30c72888f48ec

    SHA256

    03903399fb31a966050a305d95f585b4d95118eccd9e05a866ac9cdfc7dcbe9f

    SHA512

    65ccc863b46fedfe5d1e4089cf4bc93a6248f0263266639bde133b416f58e9eb8765a7b15088173470cde1db68ec536bdf65563eba82020d363cb7b2cae18f33

  • C:\Users\Admin\AppData\Local\Temp\ish240600734\images\ProgressBar.png

    Filesize

    266B

    MD5

    0e0aead9873f985325c78c564830b2da

    SHA1

    339d70c35d53f322908be28dd80002379b739921

    SHA256

    bf07069ae477cdfbcbf2541c15f1c8b0cca5158d288ea3c0f86485bd45cefd98

    SHA512

    96d6f1edeaf4b7e76fb76fda7e14fe9dca86f21f3a1281d5445603a8b52f5201013a82541c1d1887c1cb36de7cb61c1a3a5cc93f1deeaec4c680c3eabff6008c

  • C:\Users\Admin\AppData\Local\Temp\ish240600734\images\back-button.png

    Filesize

    1KB

    MD5

    c5d63a3d40ff748895cf763749e8b931

    SHA1

    b3b4248e492727690c2adc7306a8ea0cd675b2ef

    SHA256

    226abf53c68832d2f353baf5f6c4b22464571cf247e4b811b9e736a0712250e1

    SHA512

    57a8d996b853b0b756840079f47b10c0a5f56cd6ad330dfd82e8609e4f10cea26a7934e1635cf0db0ca4801600b6b25f71f443f4158a8b77c08b3cd75fe25774

  • C:\Users\Admin\AppData\Local\Temp\ish240600734\images\close_button.png

    Filesize

    1KB

    MD5

    83487401daf307d6c726a479de1ee6f9

    SHA1

    c173be4937a63672570078b325864c76b28040b8

    SHA256

    f4f0f59fccd9b87b208b416423797dcfb532472dcfef99bef41a11ea9f6f713b

    SHA512

    da69729b6682acd1c46587c7c3b4533d9afbcf84c17e55f43798f1fee0097c7a2f39860e6dbc6a9b1cb26dc63d9afab4511071981ad5fd494f36ad9659c56e50

  • C:\Users\Admin\AppData\Local\Temp\ish240600734\images\finish-button.png

    Filesize

    2KB

    MD5

    e37ec66b72996fc3ad929cd068570d4d

    SHA1

    e21be5ea412b4dc02b7d3a61ab3a798946224cae

    SHA256

    bb4c9ad7ce53b3f958f800f9f04200c0f70542a60e97bba8bdffe7d32dfe9ad4

    SHA512

    f0973de78b2299fa4116ebefb6944b0a02ff8b8e568eb8e1967b7939a041b31c09e166fc3a33b1ed74c143236b5e0faa7c3905db831b9c262e0de0af9211b9e6

  • C:\Users\Admin\AppData\Local\Temp\ish240600734\images\icon.png

    Filesize

    3KB

    MD5

    b460d82eab7af8ba6e338e351dd0ecdc

    SHA1

    265b9a3f3c80f40f8534ddcfbf9c1ed61e3b1b20

    SHA256

    47a4ac193b9bdfe15d0b8a95370823739c2ae4f6ebf2015e1412b880cde6b81d

    SHA512

    e3add5d91a61da7f64c7860e6303344f37cd49e2fde15c677924d133fec607dfe4ab4d99ec8a3322587b0b186a58e71fcd326e67057a6ff7ef80ad8ed3f0e63e

  • C:\Users\Admin\AppData\Local\Temp\ish240600734\images\next-button.png

    Filesize

    2KB

    MD5

    274548cb843bb96fcb50a79a2340b22d

    SHA1

    bb5253c868861ff10fd48dcce1309d847f087e80

    SHA256

    d4c02b2a0debcdd1689bcfbc7987826deeb6ec10806d5dd6500def9cd901735d

    SHA512

    a0117381f58b6b741b049dbb5eadb5917c4199002a73c62890c30cf5759bdf09e8a163e413dc8459dc0dbe0c2cef35d5d5d4653c3646a7214495ae51a4c0d538

  • C:\Users\Admin\AppData\Local\Temp\ish240600734\images\progress-bg.png

    Filesize

    176B

    MD5

    192b249d9413082d676f85d1509fe258

    SHA1

    4130ba10d3bb2267f19fa07dc0672e6ba23a8c4e

    SHA256

    b97788b954e0f774c72a3a5bf9e50031e0bffbd8185d05fe443a8f47cafc0660

    SHA512

    75955b892ae19c31b3180d58adc103292fc5dc764b9932b145464021aad347cfdcc5524b24712feb4f611aaa9f375a0088a194a072cf846f1fe625236ac1b82d

  • memory/2924-170-0x0000000002270000-0x0000000002398000-memory.dmp

    Filesize

    1.2MB

  • memory/2924-174-0x0000000002270000-0x0000000002398000-memory.dmp

    Filesize

    1.2MB

  • memory/2924-97-0x0000000002170000-0x0000000002171000-memory.dmp

    Filesize

    4KB

  • memory/2924-96-0x0000000002270000-0x0000000002398000-memory.dmp

    Filesize

    1.2MB

  • memory/2924-95-0x0000000002270000-0x0000000002398000-memory.dmp

    Filesize

    1.2MB

  • memory/2924-90-0x0000000002270000-0x0000000002398000-memory.dmp

    Filesize

    1.2MB

  • memory/2924-156-0x0000000002270000-0x0000000002398000-memory.dmp

    Filesize

    1.2MB

  • memory/2924-164-0x0000000002270000-0x0000000002398000-memory.dmp

    Filesize

    1.2MB

  • memory/2924-94-0x0000000002270000-0x0000000002398000-memory.dmp

    Filesize

    1.2MB

  • memory/2924-91-0x0000000002270000-0x0000000002398000-memory.dmp

    Filesize

    1.2MB

  • memory/2924-1-0x0000000002270000-0x0000000002398000-memory.dmp

    Filesize

    1.2MB

  • memory/2924-166-0x0000000002270000-0x0000000002398000-memory.dmp

    Filesize

    1.2MB

  • memory/2924-162-0x0000000002270000-0x0000000002398000-memory.dmp

    Filesize

    1.2MB

  • memory/2924-163-0x0000000002270000-0x0000000002398000-memory.dmp

    Filesize

    1.2MB

  • memory/2924-161-0x0000000002270000-0x0000000002398000-memory.dmp

    Filesize

    1.2MB

  • memory/2924-157-0x0000000002270000-0x0000000002398000-memory.dmp

    Filesize

    1.2MB

  • memory/2924-136-0x0000000002270000-0x0000000002398000-memory.dmp

    Filesize

    1.2MB

  • memory/2924-2-0x0000000002270000-0x0000000002398000-memory.dmp

    Filesize

    1.2MB

  • memory/2924-167-0x0000000002270000-0x0000000002398000-memory.dmp

    Filesize

    1.2MB

  • memory/2924-0-0x0000000000400000-0x000000000041A000-memory.dmp

    Filesize

    104KB

  • memory/2924-175-0x0000000002270000-0x0000000002398000-memory.dmp

    Filesize

    1.2MB

  • memory/2924-181-0x0000000002270000-0x0000000002398000-memory.dmp

    Filesize

    1.2MB

  • memory/2924-180-0x0000000002270000-0x0000000002398000-memory.dmp

    Filesize

    1.2MB

  • memory/2924-179-0x0000000002270000-0x0000000002398000-memory.dmp

    Filesize

    1.2MB

  • memory/2924-178-0x0000000002270000-0x0000000002398000-memory.dmp

    Filesize

    1.2MB

  • memory/2924-92-0x0000000002270000-0x0000000002398000-memory.dmp

    Filesize

    1.2MB

  • memory/2924-182-0x0000000002270000-0x0000000002398000-memory.dmp

    Filesize

    1.2MB

  • memory/2924-183-0x0000000002270000-0x0000000002398000-memory.dmp

    Filesize

    1.2MB

  • memory/2924-185-0x0000000002270000-0x0000000002398000-memory.dmp

    Filesize

    1.2MB

  • memory/2924-187-0x0000000002270000-0x0000000002398000-memory.dmp

    Filesize

    1.2MB

  • memory/2924-190-0x0000000002270000-0x0000000002398000-memory.dmp

    Filesize

    1.2MB

  • memory/2924-188-0x0000000002270000-0x0000000002398000-memory.dmp

    Filesize

    1.2MB

  • memory/2924-191-0x0000000002270000-0x0000000002398000-memory.dmp

    Filesize

    1.2MB

  • memory/2924-192-0x0000000002270000-0x0000000002398000-memory.dmp

    Filesize

    1.2MB

  • memory/2924-193-0x0000000002270000-0x0000000002398000-memory.dmp

    Filesize

    1.2MB

  • memory/2924-195-0x0000000002270000-0x0000000002398000-memory.dmp

    Filesize

    1.2MB

  • memory/2924-197-0x0000000002270000-0x0000000002398000-memory.dmp

    Filesize

    1.2MB

  • memory/2924-196-0x0000000002270000-0x0000000002398000-memory.dmp

    Filesize

    1.2MB

  • memory/2924-198-0x0000000002270000-0x0000000002398000-memory.dmp

    Filesize

    1.2MB

  • memory/2924-201-0x0000000002270000-0x0000000002398000-memory.dmp

    Filesize

    1.2MB

  • memory/2924-200-0x0000000002270000-0x0000000002398000-memory.dmp

    Filesize

    1.2MB

  • memory/2924-202-0x0000000002270000-0x0000000002398000-memory.dmp

    Filesize

    1.2MB

  • memory/2924-203-0x0000000002270000-0x0000000002398000-memory.dmp

    Filesize

    1.2MB

  • memory/2924-206-0x0000000002270000-0x0000000002398000-memory.dmp

    Filesize

    1.2MB

  • memory/2924-205-0x0000000002270000-0x0000000002398000-memory.dmp

    Filesize

    1.2MB

  • memory/2924-210-0x0000000002270000-0x0000000002398000-memory.dmp

    Filesize

    1.2MB

  • memory/2924-209-0x0000000002270000-0x0000000002398000-memory.dmp

    Filesize

    1.2MB

  • memory/2924-207-0x0000000002270000-0x0000000002398000-memory.dmp

    Filesize

    1.2MB

  • memory/2924-315-0x0000000002170000-0x0000000002171000-memory.dmp

    Filesize

    4KB