Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
9s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
28/12/2023, 20:37
General
-
Target
f67c7a6d67c9fb6ae66f998cecfd6425.exe
-
Size
116KB
-
MD5
f67c7a6d67c9fb6ae66f998cecfd6425
-
SHA1
99de80d50577cff015b26c5cc4719f5ff5483b4e
-
SHA256
8173514af97106b73aa2ea91f33d00bf34d3c8260b0ffe04785ab548a816d4fa
-
SHA512
44efcb344763fe5e87b0625d83d78d0d593c2efe772029128434cbe6d9e506876b114822802b714fd2f310981b3ea705c1b4e6f299365cacfabe70ccc3587249
-
SSDEEP
3072:Uaa0D1KkotKspI7Kc1nQIn8wBeKYVJlB1:EU0TIhP8bnVJ/1
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
UPX packed file 16 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Drops file in Windows directory 6 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f67c7a6d67c9fb6ae66f998cecfd6425.exe"C:\Users\Admin\AppData\Local\Temp\f67c7a6d67c9fb6ae66f998cecfd6425.exe"1⤵
- Drops file in Windows directory
- Suspicious use of WriteProcessMemory
-
C:\Windows\msa.exeC:\Windows\msa.exe2⤵
- Executes dropped EXE
- Drops file in Windows directory
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
4KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
4KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
212KB
-
Filesize
4KB
-
Filesize
212KB
-
Filesize
4KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
4KB
-
Filesize
212KB
-
Filesize
4KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
4KB
-
Filesize
212KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
4KB
-
Filesize
212KB