Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

6fdad0c2f6...c4.exe

windows7-x64

7

6fdad0c2f6...c4.exe

windows10-2004-x64

4

Analysis

  • max time kernel
    162s
  • max time network
    176s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26/12/2023, 12:51

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    6fdad0c2f61061e4ecd1e91afd3962c4.exe

  • Size

    1.1MB

  • MD5

    6fdad0c2f61061e4ecd1e91afd3962c4

  • SHA1

    8352dd9e0b48b250eda1b2318249d3c8b7d936f8

  • SHA256

    8ea68e559f4f23d845134ea3a26abe30d5da79c5f71a4d79bf8784489ff57c7c

  • SHA512

    3243a66833d21de3134183d48ce692630811df025d57da42457b6aa7f4c99e6564e746ca4dbea22ba42cec32afc40aed41239c55d29ff377977fc115a3cc62cd

  • SSDEEP

    24576:zaqNgQ9gEi+P8UDXUxNjPgVKMfjCYXqj9xluj4ml:uq2Q1ia8UDXUDPgVJ7CYajHoUm

Score
4/10

Malware Config

Signatures

  • Drops file in Program Files directory 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious behavior: EnumeratesProcesses 8 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\6fdad0c2f61061e4ecd1e91afd3962c4.exe
    "C:\Users\Admin\AppData\Local\Temp\6fdad0c2f61061e4ecd1e91afd3962c4.exe"
    1⤵
    • Drops file in Program Files directory
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:4616
    • C:\Users\Admin\AppData\Local\Temp\6fdad0c2f61061e4ecd1e91afd3962c4.exe
      "C:\Users\Admin\AppData\Local\Temp\6fdad0c2f61061e4ecd1e91afd3962c4.exe" /_ShowProgress
      2⤵
      • Suspicious behavior: EnumeratesProcesses
      PID:4980

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\ISH240~2\blank.gif
    Filesize

    49B

    MD5

    56398e76be6355ad5999b262208a17c9

    SHA1

    a1fdee122b95748d81cee426d717c05b5174fe96

    SHA256

    2f561b02a49376e3679acd5975e3790abdff09ecbadfa1e1858c7ba26e3ffcef

    SHA512

    fd8b021f0236e487bfee13bf8f0ae98760abc492f7ca3023e292631979e135cb4ccb0c89b6234971b060ad72c0ca4474cbb5092c6c7a3255d81a54a36277b486

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\ISH240~2\css\buttons.css
    Filesize

    2KB

    MD5

    7c4779d5747bd6f58bb333355ed05763

    SHA1

    e13f92b9fa805721e9a3f78452ce64ed4abae8d8

    SHA256

    3120f2592bf7a5eb0b00a35b1f3a80d96133d4c2cd32c552b3010470fc5b6bf3

    SHA512

    201e9bae874685cca72e360400fba22a8db78d9e4954137a4f4097128663f6d593d330e2b868ada8ece0ab6f81a9ee915190898d70dda3a5b09526723c411c28

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\ISH240~2\css\ie6_main.css
    Filesize

    1KB

    MD5

    e2b95752fa7470f4d04b9c3c5392ee36

    SHA1

    c8223482663d8c0ac8a7cca66e8a45ce2b93df56

    SHA256

    a2f160bb8219baab7e8aaab8ff0d7973cc0c44d89d9eecd1bf4c688256db128f

    SHA512

    0008faaf41026281e9b07cdcc730ceca0eb57ad9ba9c7df2361a5216d1d0b94c7137218c05d6435107bb1ea4d988d84150a6a266d86ce04d04321b3725276c3f

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\ISH240~2\css\main.css
    Filesize

    4KB

    MD5

    017c83af9aaef5369797ffe4bba779b9

    SHA1

    641e65ac7be9eb43adb74dc898c75e4f74a7fb7d

    SHA256

    14d3ceab75ea4dfc11c0ba5b3abba8be016a8954ebe97b3e2087dc0b5a3c6f88

    SHA512

    95f7cfd4a065ed01a9210e6303a205e58c82c00e7e13482e85723345af27a3357950426f3883fa6d79bc399a5635a5ec04c6c4b1e2d2ab34fc7300b30fbbe4a2

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\ISH240~2\css\sdk-ui\browse.css
    Filesize

    318B

    MD5

    10c359bc980927bb66b215407ece3e66

    SHA1

    4a2fc034bf7b4e84d832b6bbd9413d2055b9ec62

    SHA256

    5b12769a75d1c755a284a73e1b8422f73d6223c23b72e5bce698c17f50185aa8

    SHA512

    ed707c6bbf5023aa147571d9d186e8348b11da6fb462de69e4135480f2e10081c416c80745411752797401660221e2040e624b5a6d3e1a57ba59cdcc009eb16c

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\ISH240~2\css\sdk-ui\button.css
    Filesize

    417B

    MD5

    37e1ff96e084ec201f0d95feef4d5e94

    SHA1

    4ec405f2668d5d93260525ad916abafa2414cb72

    SHA256

    8e806f5b94fc294e918503c8053ef1284e4f4b1e02c7da4f4635e33ec33e0534

    SHA512

    1a8a27a92abe35edaa2c950b130579c92f0d0d87b09971843c39569cf06d407b8e896751e73452676bfad45a363f0b6dd00cb6c5faf33966880539e106b19f94

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\ISH240~2\css\sdk-ui\checkbox.css
    Filesize

    190B

    MD5

    64773c6b0e3413c81aebc46cce8c9318

    SHA1

    50f84ef8331341b48981af82313b146863eba526

    SHA256

    b09504c1bf0486d3ec46500592b178a3a6c39284672af8815c3687cc3d29560d

    SHA512

    03e96bef74c0b3a31124c3d3c1bb78af1053a8719ca373c6b9316d63bac9545c1f4ecc2d747eb64341d8da31bc0f23da094e19c3e07ed46f65c28dc88e13bd3a

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\ISH240~2\css\sdk-ui\images\button-bg.png
    Filesize

    131B

    MD5

    98b1de48dfa64dc2aa1e52facfbee3b0

    SHA1

    a1615c118fbfa49253d98185eae283f26ea392d7

    SHA256

    2693930c474fe640e2fe8d6ef98abe2ecd303d2392c3d8b2e006e8942ba8f534

    SHA512

    6529c2602a88139f44534c70bc41f02a3a99cda666cd9d2be5e3f1fb45bb2c9b288cf7eb4636070713787017e108b7c353983c7a7f5ff213a8dcfc5d780df945

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\ISH240~2\css\sdk-ui\images\progress-bg.png
    Filesize

    2KB

    MD5

    32a6846fe53388eb03be3ada2221297f

    SHA1

    1c1baec7b7fe7a420ccf68d3112384b44f8ba89e

    SHA256

    5c6d20c98c106bc6df49447b9939a90ba6a5e3c20d89ca0621677a7501bdb127

    SHA512

    79c4f3a72467b61c27d6e93415bae3fc61a9fde62aae4202ba8ed1de6328f5facc48092bfe57db70338a0a4b50f571d501eed04aed8b047d20aa28ee7446ce98

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\ISH240~2\css\sdk-ui\progress-bar.css
    Filesize

    632B

    MD5

    8f6a2e09ace79158461b82d74ff6c7fd

    SHA1

    88f079fd001feb2cb302565b87fdb81c8995dd93

    SHA256

    b4bee76334ab9b4b0bdd2bff1b3f3a7b30d2e758bb8d4c6e457c9594bb62960c

    SHA512

    869305ea12f21564e56882fef318cdc21f88715f894e8140ae6b2cf3137a4c2002a34f2f8ae2719f770e2d0c892244b5e5f3229f1382e799dd309f52657cb98e

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\ISH240~2\images\Bg.gif
    Filesize

    20KB

    MD5

    94d82a50272a4423dca66ae32e0602ca

    SHA1

    18a1300c684442bffb41dcba54d30c72888f48ec

    SHA256

    03903399fb31a966050a305d95f585b4d95118eccd9e05a866ac9cdfc7dcbe9f

    SHA512

    65ccc863b46fedfe5d1e4089cf4bc93a6248f0263266639bde133b416f58e9eb8765a7b15088173470cde1db68ec536bdf65563eba82020d363cb7b2cae18f33

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\ISH240~2\images\Progress.png
    Filesize

    333B

    MD5

    2306755853711f1cb2f97cfc90440fb8

    SHA1

    57d2e50c9f6345d6a81b2d766d31d92ed741f822

    SHA256

    7d8fbea93aeaf1b97aefb6b787c41d26bbb781139eaf1007b70b2c22806d8554

    SHA512

    dc3f146d696d69b5375048a997c66ada9942f935eff0151807ba5dcde62cbb0fb43a59df797a3c27c377c07087004011a9e4a7b0256844ca8bae84a6bcf0d496

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\ISH240~2\images\ProgressBar.png
    Filesize

    266B

    MD5

    0e0aead9873f985325c78c564830b2da

    SHA1

    339d70c35d53f322908be28dd80002379b739921

    SHA256

    bf07069ae477cdfbcbf2541c15f1c8b0cca5158d288ea3c0f86485bd45cefd98

    SHA512

    96d6f1edeaf4b7e76fb76fda7e14fe9dca86f21f3a1281d5445603a8b52f5201013a82541c1d1887c1cb36de7cb61c1a3a5cc93f1deeaec4c680c3eabff6008c

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\ISH240~2\images\back-button.png
    Filesize

    1KB

    MD5

    c5d63a3d40ff748895cf763749e8b931

    SHA1

    b3b4248e492727690c2adc7306a8ea0cd675b2ef

    SHA256

    226abf53c68832d2f353baf5f6c4b22464571cf247e4b811b9e736a0712250e1

    SHA512

    57a8d996b853b0b756840079f47b10c0a5f56cd6ad330dfd82e8609e4f10cea26a7934e1635cf0db0ca4801600b6b25f71f443f4158a8b77c08b3cd75fe25774

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\ISH240~2\images\back-over.png
    Filesize

    969B

    MD5

    b3892db811ca786a8f404373a47d6cad

    SHA1

    8de5df9aac3e1f20e005c30a3cfbce789d5de88f

    SHA256

    4206310cd80cd3f3321c4d75b7799ad2c1f33e65bce067c12713c8ba9d91d722

    SHA512

    73b1391515a27d89594d6121d32a578568952571bc1b2ea21a7b3ebfc998e800c13c1ea45e921046d1c8bbe9d52b582cfd662071fadb21bfba58ebe8102fe8aa

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\ISH240~2\images\back.png
    Filesize

    991B

    MD5

    8a99e16e48ab5bfd0084ccd49281b036

    SHA1

    ab40545bb33ab2bad0891d3b71c3f618a916cb1d

    SHA256

    e44a2c233a1b29a6cb3bdd5955dece4ddd1e7497d3529bb55add8da124ad3fef

    SHA512

    f8b5fd65300cfd1f7554e381d0a3313ce8611aa092b44322c1b59ebc145e915707825f0fcf8e2e979ef6464df713db4d3897f4624f5ab9d777d4f8c4c5ef95cb

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\ISH240~2\images\close_button.png
    Filesize

    1KB

    MD5

    83487401daf307d6c726a479de1ee6f9

    SHA1

    c173be4937a63672570078b325864c76b28040b8

    SHA256

    f4f0f59fccd9b87b208b416423797dcfb532472dcfef99bef41a11ea9f6f713b

    SHA512

    da69729b6682acd1c46587c7c3b4533d9afbcf84c17e55f43798f1fee0097c7a2f39860e6dbc6a9b1cb26dc63d9afab4511071981ad5fd494f36ad9659c56e50

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\ISH240~2\images\finish-button.png
    Filesize

    2KB

    MD5

    e37ec66b72996fc3ad929cd068570d4d

    SHA1

    e21be5ea412b4dc02b7d3a61ab3a798946224cae

    SHA256

    bb4c9ad7ce53b3f958f800f9f04200c0f70542a60e97bba8bdffe7d32dfe9ad4

    SHA512

    f0973de78b2299fa4116ebefb6944b0a02ff8b8e568eb8e1967b7939a041b31c09e166fc3a33b1ed74c143236b5e0faa7c3905db831b9c262e0de0af9211b9e6

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\ISH240~2\images\icon.png
    Filesize

    3KB

    MD5

    b460d82eab7af8ba6e338e351dd0ecdc

    SHA1

    265b9a3f3c80f40f8534ddcfbf9c1ed61e3b1b20

    SHA256

    47a4ac193b9bdfe15d0b8a95370823739c2ae4f6ebf2015e1412b880cde6b81d

    SHA512

    e3add5d91a61da7f64c7860e6303344f37cd49e2fde15c677924d133fec607dfe4ab4d99ec8a3322587b0b186a58e71fcd326e67057a6ff7ef80ad8ed3f0e63e

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\ISH240~2\images\loader.gif
    Filesize

    6KB

    MD5

    85954ea60a946e9c41e33260cee2bbc4

    SHA1

    a2b8147953636de537c66afb06105a3889a55915

    SHA256

    58ace53f649bfbc2825d6711e08fe94c3bd065a1c457a5c0ccae0130dcf3e2bc

    SHA512

    39bc4ae9584b69048613b66cf8e207f4fe6ebce1f3dedc6c05733e5cad06c8ab3c04af548c6c45a94b0a5769e1073c6a8f97fec5f47e4d3e0128d37539d68668

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\ISH240~2\images\next-button-over.png
    Filesize

    2KB

    MD5

    23802443dcdd0cb5dcc00f1d3bd9cfe6

    SHA1

    513234aec8111706e7031090bd85f26e524821d8

    SHA256

    0d3880478ddf7f7dddd81183a522d096a4f1fc5a247a5dd1ba062389b50b6398

    SHA512

    d27546374713519406e71fcd8df47822b4a5dc474e1e7a124e52ad61d9a9ccc3fe9c78d5ab5b8f46582cb4a5e914682ce824b262262279048138a1fe615d4425

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\ISH240~2\images\next-button.png
    Filesize

    2KB

    MD5

    274548cb843bb96fcb50a79a2340b22d

    SHA1

    bb5253c868861ff10fd48dcce1309d847f087e80

    SHA256

    d4c02b2a0debcdd1689bcfbc7987826deeb6ec10806d5dd6500def9cd901735d

    SHA512

    a0117381f58b6b741b049dbb5eadb5917c4199002a73c62890c30cf5759bdf09e8a163e413dc8459dc0dbe0c2cef35d5d5d4653c3646a7214495ae51a4c0d538

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\ISH240~2\images\next.png
    Filesize

    1KB

    MD5

    a4987c1267f6e8361800aa3d2dc840a2

    SHA1

    6d428d5e9333f78ffb65f8ac3aab06c8915078a3

    SHA256

    1b7fffc6ecbde629472f7e1b534243f7f7da06a6f2fed082cf1c62b6b002e9d5

    SHA512

    5fc4a1619851dddb8e689cbb342570f3004a7e4c030c593ac361b55584cda6178b3ce6a4baeed810467e569c07587affde5180420d793eb380782f440b23660a

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\ISH240~2\images\progress-bg.png
    Filesize

    176B

    MD5

    192b249d9413082d676f85d1509fe258

    SHA1

    4130ba10d3bb2267f19fa07dc0672e6ba23a8c4e

    SHA256

    b97788b954e0f774c72a3a5bf9e50031e0bffbd8185d05fe443a8f47cafc0660

    SHA512

    75955b892ae19c31b3180d58adc103292fc5dc764b9932b145464021aad347cfdcc5524b24712feb4f611aaa9f375a0088a194a072cf846f1fe625236ac1b82d

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\ISH240~2\license\DE.license.txt
    Filesize

    21KB

    MD5

    94c7bdca5f950c087ebf2dcba0550ac4

    SHA1

    504f74335aeecc9db7984ca1cfa1b694b0a1ce24

    SHA256

    9b03f6e9d96817bbc51a616ca81ef7680983f9bff373e1a4338d09a20afacecc

    SHA512

    3341baa8796c6aae6cdc8e6bf75f4711228974d75f800e02264c46885b69d0a2c446797b97bfe76ce27e7a2349c54787845249723a92d2479302897a589fb062

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\ISH240~2\license\EN.license.txt
    Filesize

    18KB

    MD5

    75a5340d5a321f4f889e7891336a3478

    SHA1

    546e8db4ecbba7a701d36a3b1b263c9d9b60d384

    SHA256

    2e96077f9c3561812cdff65a8f177f111079542a71525e461dbc91d3628196bf

    SHA512

    325c898d0b9d355793e47712317d1b08ec76b1cacc63044d783de25f4665119844620ae087c57355d97ce335d6056b38fbbc2aa517c2be870454eee7873360b1

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\ISH240~2\locale\EN.locale
    Filesize

    2KB

    MD5

    e53a570c05beec0b8709c069ba1ee105

    SHA1

    4522ea2e4e1601bfc3f3313ee18545ad69311320

    SHA256

    6436520dfd90c84885b65025bbc94b0c78249a3be73242bcd43bfd7400733bff

    SHA512

    64f6e7aa5af7458ddb5e8a7bd57d5f80a8909484f7e2bf6ba08c489c64dc241c49a1c8c65ee282d5bc01d4e91daa60d757a84ce435a516ff797250cb3b643bf4

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\ISH240~2\sdk\exceptlist.txt
    Filesize

    34B

    MD5

    f01863cce9f2a2e4dcef02f285e561af

    SHA1

    e2cba65be3f487e3760cf8d9247d3f4f73ff8174

    SHA256

    beb378e0a5006f4c2b0eb6d17a31b4f667549a6e7afc8b8a2beae0640331662d

    SHA512

    f739d448d6fb493293fb9352200757340fa9c05ee3ee4bc82bf9441760af872b500dd7ed307b5cda76dd6cdb20925487ef2b6c32c0d64477f3ad9615d58cd086

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\ish240666203\bootstrap_15004.html
    Filesize

    156B

    MD5

    1ea9e5b417811379e874ad4870d5c51a

    SHA1

    a4bd01f828454f3619a815dbe5423b181ec4051c

    SHA256

    f076773a6e3ae0f1cee3c69232779a1aaaf05202db472040c0c8ea4a70af173a

    SHA512

    965c10d2aa5312602153338da873e8866d2782e0cf633befe5a552b770e08abf47a4d2e007cdef7010c212ebcb9fefea5610c41c7ed1553440eaeab7ddd72daa

    Download Submit

  • memory/4616-93-0x0000000000B20000-0x0000000000B21000-memory.dmp

    Filesize

    4KB

    Download

  • memory/4616-252-0x0000000000400000-0x000000000051E000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/4616-286-0x0000000000400000-0x000000000051E000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/4616-284-0x0000000000400000-0x000000000051E000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/4616-91-0x0000000000400000-0x000000000051E000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/4616-90-0x0000000000400000-0x000000000051E000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/4616-2-0x0000000000400000-0x000000000051E000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/4616-183-0x0000000000400000-0x000000000051E000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/4616-283-0x0000000000400000-0x000000000051E000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/4616-282-0x0000000000400000-0x000000000051E000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/4616-221-0x0000000000400000-0x000000000051E000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/4616-1-0x0000000000B20000-0x0000000000B21000-memory.dmp

    Filesize

    4KB

    Download

  • memory/4616-225-0x0000000000400000-0x000000000051E000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/4616-0-0x0000000000400000-0x000000000051E000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/4616-280-0x0000000000400000-0x000000000051E000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/4616-281-0x0000000000400000-0x000000000051E000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/4980-220-0x0000000000400000-0x000000000051E000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/4980-187-0x0000000000400000-0x000000000051E000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/4980-92-0x0000000000400000-0x000000000051E000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/4980-94-0x00000000006F0000-0x00000000006F1000-memory.dmp

    Filesize

    4KB

    Download