Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
163s -
max time network
201s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
26/12/2023, 12:35
General
-
Target
6eec719e104b53e6311ea935d32b3fc7.exe
-
Size
90KB
-
MD5
6eec719e104b53e6311ea935d32b3fc7
-
SHA1
4abe9c0c281465a1fa2a178d371c901c084e3791
-
SHA256
765ab8fd3605fb6ecd0dd70507d3a21f5a49e21f4dd0b369767d7bf364a3fda4
-
SHA512
962957215e4b66ea55fde8b4d689bdec3b063610bb83886620b0219db4920cb72800a49718ddbf5c51101df157aac92e3241fbe62da54db1e619d466e076ab8d
-
SSDEEP
1536:AAsqhD+MFIoGMfa4PhAJkAluAOv2xMbwp+uaEst7ez5WnmP6XOSLr+k/8YjF:AAsqplIo9pAluAdM8aEsxez5WnCpCh/p
Score
7/10
Malware Config
Signatures
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of UnmapMainImage 1 IoCs
-
Suspicious use of WriteProcessMemory 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\6eec719e104b53e6311ea935d32b3fc7.exe"C:\Users\Admin\AppData\Local\Temp\6eec719e104b53e6311ea935d32b3fc7.exe"1⤵
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\svchost.exesvchost.exe2⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
148KB
-
Filesize
4KB
-
Filesize
72KB
-
Filesize
148KB
-
Filesize
80KB
-
Filesize
56KB
-
Filesize
80KB