Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
142s -
max time network
47s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
26/12/2023, 03:53
Static task
static1
Behavioral task
behavioral1
Sample
51fc186a9dc4f86a443b926a1eaf97a6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
51fc186a9dc4f86a443b926a1eaf97a6.exe
Resource
win10v2004-20231222-en
General
-
Target
51fc186a9dc4f86a443b926a1eaf97a6.exe
-
Size
255KB
-
MD5
51fc186a9dc4f86a443b926a1eaf97a6
-
SHA1
54f0848f3703901f096250257f6b07ef9fbc60bb
-
SHA256
10ac9ff23e060add2659e8da5dcb49a736bacd35db13eb2e1a4862fc850210fa
-
SHA512
a8b94858cd918a7477fa8459188862690dd1a5965d33ee87c0bf5cec9454b9684f1c02232bf07cbf80cd629dca0f9cf5bd039f62d15ad5954eb0795d4967ab35
-
SSDEEP
6144:bLpLucFz07jbh5WQ5E2jVcPHz3G1GIw92e:puIWN5z5ljVozsw92e
Malware Config
Signatures
-
Maps connected drives based on registry 3 TTPs 2 IoCs
Disk information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\services\disk\enum 51fc186a9dc4f86a443b926a1eaf97a6.exe Key value enumerated \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\disk\Enum 51fc186a9dc4f86a443b926a1eaf97a6.exe -
Drops file in Windows directory 1 IoCs
description ioc Process File created C:\Windows\Tasks\MeetingLogs.job 51fc186a9dc4f86a443b926a1eaf97a6.exe