Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    0s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26/12/2023, 04:55

General

  • Target

    55e21a402b17703ca044dc585b0d5d2a.exe

  • Size

    471KB

  • MD5

    55e21a402b17703ca044dc585b0d5d2a

  • SHA1

    e03eedeed893fd870288a100d759c6c76acd2189

  • SHA256

    2111187e6d195d1aec69079bba27790277af6c89b74c3c5a25c4c6d5091eb7f8

  • SHA512

    3d4662e1774ad65966f461e7161805b2945e19472b59cb6ddfa9460fb7c2b1a4a2e22dc4ce2e83eceee764236a50ee62756fe009fc885252a5e3738d61ab3e2f

  • SSDEEP

    6144:9msyd7BspOWZ+Stxo3Gc2uqy3gu88mWCMpCRWFf2Kj+m+6XjYT1:ppO3StxwGc2c3tfmfsCRA22+m+8I1

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\55e21a402b17703ca044dc585b0d5d2a.exe
    "C:\Users\Admin\AppData\Local\Temp\55e21a402b17703ca044dc585b0d5d2a.exe"
    1⤵
      PID:2760
      • C:\Users\Admin\AppData\Local\Temp\DM\worker.exe
        "C:\Users\Admin\AppData\Local\Temp\DM\worker.exe"
        2⤵
          PID:4260

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • C:\Users\Admin\AppData\Local\Temp\DM\worker.exe

        Filesize

        19KB

        MD5

        2b23c69b68708c14fc214c3454e6b1bd

        SHA1

        5c923d25c14ad13dab4f05bb1423026f873e7dc4

        SHA256

        b2eb3b20cfa82a80207cb9fe8ea7cb28faa1b35612816b7b0052e68b9c8068bd

        SHA512

        00135ff0664e9de5f98be600773c72025f5f338e7301ab9d10b023fef672baa2ddbe3124813352eacf8d7475f0905d68dded619aa2cc3099f10b943ff3cdb8c5

      • memory/4260-13-0x0000000001360000-0x0000000001370000-memory.dmp

        Filesize

        64KB

      • memory/4260-15-0x00007FFBC43A0000-0x00007FFBC4D41000-memory.dmp

        Filesize

        9.6MB

      • memory/4260-16-0x000000001C240000-0x000000001C70E000-memory.dmp

        Filesize

        4.8MB

      • memory/4260-17-0x000000001C7B0000-0x000000001C84C000-memory.dmp

        Filesize

        624KB

      • memory/4260-14-0x000000001B9B0000-0x000000001B9F4000-memory.dmp

        Filesize

        272KB

      • memory/4260-18-0x000000001B8B0000-0x000000001B8B8000-memory.dmp

        Filesize

        32KB

      • memory/4260-12-0x00007FFBC43A0000-0x00007FFBC4D41000-memory.dmp

        Filesize

        9.6MB

      • memory/4260-20-0x0000000001360000-0x0000000001370000-memory.dmp

        Filesize

        64KB

      • memory/4260-19-0x0000000001360000-0x0000000001370000-memory.dmp

        Filesize

        64KB

      • memory/4260-21-0x0000000001360000-0x0000000001370000-memory.dmp

        Filesize

        64KB

      • memory/4260-22-0x000000001FE30000-0x000000001FE92000-memory.dmp

        Filesize

        392KB

      • memory/4260-25-0x0000000001360000-0x0000000001370000-memory.dmp

        Filesize

        64KB

      • memory/4260-34-0x0000000020CA0000-0x0000000021157000-memory.dmp

        Filesize

        4.7MB

      • memory/4260-36-0x0000000001360000-0x0000000001370000-memory.dmp

        Filesize

        64KB

      • memory/4260-35-0x00007FFBC43A0000-0x00007FFBC4D41000-memory.dmp

        Filesize

        9.6MB

      • memory/4260-39-0x0000000001360000-0x0000000001370000-memory.dmp

        Filesize

        64KB

      • memory/4260-38-0x0000000001360000-0x0000000001370000-memory.dmp

        Filesize

        64KB

      • memory/4260-40-0x0000000001360000-0x0000000001370000-memory.dmp

        Filesize

        64KB

      • memory/4260-41-0x0000000001360000-0x0000000001370000-memory.dmp

        Filesize

        64KB