Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
26/12/2023, 00:14
Static task
static1
Behavioral task
behavioral1
Sample
459c860c99abd359029aad04236928bd.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
459c860c99abd359029aad04236928bd.exe
Resource
win10v2004-20231222-en
General
-
Target
459c860c99abd359029aad04236928bd.exe
-
Size
247KB
-
MD5
459c860c99abd359029aad04236928bd
-
SHA1
697185b9f3c255c35194935fe8510d2955c110a5
-
SHA256
128fe34fb8f0154e679efb9f385bbad5ee6d458a9a6e7b31d1b09ec5c034975c
-
SHA512
a9eae6abf9690ef167f1d0d765c05bf5e39650cd70ad9179f29f04be4efe86591df56e4fac911be5d70b7b97b4423856d80b0f5e4cfa7923befc7fcc9751139a
-
SSDEEP
3072:7FXoDt6QAmP/NO4v4ZkxhJzir0Wjf45Dfg8km0YVOlJcLixvl88gytlMaOO+4URX:KAQnIaoYMKpfLuTgy/NRBe8F
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule behavioral2/files/0x0007000000023228-2.dat acprotect -
Loads dropped DLL 7 IoCs
pid Process 4364 459c860c99abd359029aad04236928bd.exe 4364 459c860c99abd359029aad04236928bd.exe 4364 459c860c99abd359029aad04236928bd.exe 4364 459c860c99abd359029aad04236928bd.exe 4364 459c860c99abd359029aad04236928bd.exe 4364 459c860c99abd359029aad04236928bd.exe 4364 459c860c99abd359029aad04236928bd.exe -
resource yara_rule behavioral2/memory/4364-5-0x0000000075250000-0x000000007525A000-memory.dmp upx behavioral2/files/0x0007000000023228-2.dat upx behavioral2/memory/4364-39-0x0000000073B40000-0x0000000073B49000-memory.dmp upx -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
25KB
MD529e2dcdfb57ee3ab5e2bbc2fc3c42f02
SHA1bd6cafcce5b70ee15311f9f53e9fd4aac819ccda
SHA2562b7a69e98ed4975fd4eade513cff17099c43b3eebe7e7641696d1d20e8e14b2f
SHA512f71c981b3b5308566b56156462d106ebf8e49a32e55b70891f9d70338941afd347cb4df374fe38b9b3d7309f63dd75a7c80ebe02bb8941d558cd638a6f8daf7a
-
Filesize
7KB
MD5b9cd1b0fd3af89892348e5cc3108dce7
SHA1f7bc59bf631303facfc970c0da67a73568e1dca6
SHA25649b173504eb9cd07e42a3c4deb84c2cd3f3b49c7fb0858aee43ddfc64660e384
SHA512fdcbdd21b831a92ca686aab5b240f073a89a08588e42439564747cad9160d79cfa8e3c103b6b4f2917684c1a591880203b4303418b85bc040f9f00b6658b0c90