Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    147s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26/12/2023, 09:20

General

  • Target

    63437787b6ea7b01b6d60738176253df.exe

  • Size

    454KB

  • MD5

    63437787b6ea7b01b6d60738176253df

  • SHA1

    db9d782eaa6ee6cbe57fb7b6b8fd51544c894b1d

  • SHA256

    04d4cf41ffc4f5f10daf42a862d13d97a8b05c3536d0e20753cb0526b32ee170

  • SHA512

    65edd868618dbb231dfce32e5d412eee3829014d23d80aaca2da2c16df83442818b8cf7050f99c40478be7daf957b32dcd18ac5fe534ef4a09b4c1eeda8fb284

  • SSDEEP

    6144:HXwmLxhK8ZRJslla/d8OWAam+7YQATko9qInAj1GTv5KNnmaqgcsC9EGUhKaEjhE:HAkTBRGlAS6rGTAnKg2P+e

Score
7/10

Malware Config

Signatures

  • Drops startup file 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\63437787b6ea7b01b6d60738176253df.exe
    "C:\Users\Admin\AppData\Local\Temp\63437787b6ea7b01b6d60738176253df.exe"
    1⤵
    • Drops startup file
    PID:2712

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2712-1-0x0000000001110000-0x0000000001111000-memory.dmp

    Filesize

    4KB

  • memory/2712-0-0x0000000001100000-0x0000000001102000-memory.dmp

    Filesize

    8KB

  • memory/2712-2-0x00000000011E0000-0x00000000011E1000-memory.dmp

    Filesize

    4KB

  • memory/2712-7-0x0000000001220000-0x0000000001221000-memory.dmp

    Filesize

    4KB

  • memory/2712-11-0x0000000001B50000-0x0000000001B51000-memory.dmp

    Filesize

    4KB

  • memory/2712-34-0x0000000003B90000-0x0000000003B91000-memory.dmp

    Filesize

    4KB

  • memory/2712-33-0x0000000003830000-0x0000000003831000-memory.dmp

    Filesize

    4KB

  • memory/2712-32-0x0000000003810000-0x0000000003811000-memory.dmp

    Filesize

    4KB

  • memory/2712-31-0x0000000001240000-0x0000000001242000-memory.dmp

    Filesize

    8KB

  • memory/2712-29-0x0000000001C10000-0x0000000001C11000-memory.dmp

    Filesize

    4KB

  • memory/2712-28-0x0000000003820000-0x0000000003821000-memory.dmp

    Filesize

    4KB

  • memory/2712-25-0x0000000003800000-0x0000000003801000-memory.dmp

    Filesize

    4KB

  • memory/2712-23-0x00000000037E0000-0x00000000037E1000-memory.dmp

    Filesize

    4KB

  • memory/2712-24-0x00000000037F0000-0x00000000037F1000-memory.dmp

    Filesize

    4KB

  • memory/2712-22-0x00000000037D0000-0x00000000037D1000-memory.dmp

    Filesize

    4KB

  • memory/2712-21-0x00000000037C0000-0x00000000037C1000-memory.dmp

    Filesize

    4KB

  • memory/2712-20-0x0000000001C20000-0x0000000001C21000-memory.dmp

    Filesize

    4KB

  • memory/2712-18-0x0000000001BC0000-0x0000000001BC1000-memory.dmp

    Filesize

    4KB

  • memory/2712-19-0x0000000001C00000-0x0000000001C01000-memory.dmp

    Filesize

    4KB

  • memory/2712-17-0x0000000001BB0000-0x0000000001BB1000-memory.dmp

    Filesize

    4KB

  • memory/2712-16-0x0000000001BA0000-0x0000000001BA1000-memory.dmp

    Filesize

    4KB

  • memory/2712-15-0x0000000001B90000-0x0000000001B91000-memory.dmp

    Filesize

    4KB

  • memory/2712-14-0x0000000001B80000-0x0000000001B81000-memory.dmp

    Filesize

    4KB

  • memory/2712-13-0x0000000001B70000-0x0000000001B71000-memory.dmp

    Filesize

    4KB

  • memory/2712-12-0x0000000001B60000-0x0000000001B61000-memory.dmp

    Filesize

    4KB

  • memory/2712-8-0x0000000001230000-0x0000000001231000-memory.dmp

    Filesize

    4KB

  • memory/2712-5-0x0000000001210000-0x0000000001211000-memory.dmp

    Filesize

    4KB

  • memory/2712-4-0x0000000001BD0000-0x0000000001BF6000-memory.dmp

    Filesize

    152KB

  • memory/2712-3-0x0000000001200000-0x0000000001201000-memory.dmp

    Filesize

    4KB