Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    147s
  • max time network
    94s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26/12/2023, 14:03

General

  • Target

    741d29cecac8a95c80f13285229aaa06.exe

  • Size

    6.3MB

  • MD5

    741d29cecac8a95c80f13285229aaa06

  • SHA1

    04d62101ebf74809d1b5002bb26310d05888e739

  • SHA256

    b6bf533afaee9a8c87c382878d103edf163c0de38c97a7b76997c03c71843baa

  • SHA512

    a53eb4a6e493acce7c4cb7120ea8fc8fc375580924ed8194c526894bf8acfd6fc708f12f7b4c26cb5a66cac7171be3d5eb690df59fc27772ef449b8e0eb2145f

  • SSDEEP

    98304:lELTPw54emm/uiXWBkhGT5mkJH5UAfZZMiF9O5vPkFN2DZokfgd8o6li8:eYDJuiXCk25miZxBZMh3

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Drops file in System32 directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\741d29cecac8a95c80f13285229aaa06.exe
    "C:\Users\Admin\AppData\Local\Temp\741d29cecac8a95c80f13285229aaa06.exe"
    1⤵
    • Drops file in System32 directory
    PID:3088

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3088-0-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/3088-1-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/3088-2-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/3088-3-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/3088-4-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/3088-5-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/3088-6-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/3088-7-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/3088-8-0x0000000002ED0000-0x0000000002ED1000-memory.dmp

    Filesize

    4KB

  • memory/3088-9-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/3088-11-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/3088-13-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/3088-14-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/3088-15-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/3088-16-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/3088-17-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/3088-18-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/3088-19-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/3088-20-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/3088-21-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/3088-22-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/3088-23-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/3088-24-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/3088-25-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/3088-26-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB