Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
151s -
max time network
181s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
29/12/2023, 23:14
General
-
Target
069f533a54d2759964be2cc9372e1c76.exe
-
Size
2.7MB
-
MD5
069f533a54d2759964be2cc9372e1c76
-
SHA1
e7b779c23947e919300f7e077f23b4f93c9e8d2f
-
SHA256
21f24475ec1ac6b6fc5a0e5743fe92ab4c553b92864d0fb2b1a033de7175d08b
-
SHA512
58348ddef9adfa6aeefbb7417df601532c62e7eb22edbf1d567564491286461a7afa50e8dec6b3c57481ae650ae563c0225a0596e91709871ec8684431e8c5e7
-
SSDEEP
49152:CqgGsIdWSD58cpsVJSwyQrHq7NdRoVxYj1wmv/d1RlW3PLwARY:McWSD58cw5yQzaNHUxKws1u/
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
UPX packed file 3 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\069f533a54d2759964be2cc9372e1c76.exe"C:\Users\Admin\AppData\Local\Temp\069f533a54d2759964be2cc9372e1c76.exe"1⤵
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\069f533a54d2759964be2cc9372e1c76.exeC:\Users\Admin\AppData\Local\Temp\069f533a54d2759964be2cc9372e1c76.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.7MB
MD5175bca8050987c35d8e274635b29c4ed
SHA10418ca30f91d1511872b1aac95e3b20faa1da536
SHA256754d3b66047479d279d1d21f1299b8b8e3bfc508ffc9872811f25a71d01bf6cb
SHA512a158cc78f5faa843125ed38889b0dfd00512f1becbb198cd124a954a60d3251624e7435d186d33cb2309e76f99ef7b9ceba7dd6f5aeda9fedfae597f7b4e3252
-
Filesize
4.4MB
-
Filesize
1.9MB
-
Filesize
1.1MB
-
Filesize
4.4MB
-
Filesize
4.4MB
-
Filesize
1.1MB
-
Filesize
1.9MB
-
Filesize
1.9MB