Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
164s -
max time network
189s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
29/12/2023, 23:12
General
-
Target
0699bcd46158669818cc9f8fef3fe753.exe
-
Size
134KB
-
MD5
0699bcd46158669818cc9f8fef3fe753
-
SHA1
faa3015fd6893289fda8fc59b5da433264a85844
-
SHA256
31d5ec271c744397f48bfc6af418b450610ac39c718690f350b564d2e5a4994d
-
SHA512
89268d68b9378f55d811394a30805c156b4e259c8d4794507fc9ac195b817bc0b4c5361bc0ae79daf292eed024aa8006ee919a78d3a13ef0e6e28b3ff27f69d5
-
SSDEEP
3072:s1u0Ge/rORlQLMvtWT4bLpVBBY1J4Bhk8OGVnIwQpzjout:sQBe/rOROM1WT4bL7Hz88OGVnI9HoS
Score
7/10
Malware Config
Signatures
-
UPX packed file 3 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious behavior: RenamesItself 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0699bcd46158669818cc9f8fef3fe753.exe"C:\Users\Admin\AppData\Local\Temp\0699bcd46158669818cc9f8fef3fe753.exe"1⤵
- Suspicious behavior: RenamesItself
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\voussooquukur.exeC:\Windows\system32\voussooquukur.exe2⤵
- Suspicious behavior: RenamesItself
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
196KB
-
Filesize
172KB
-
Filesize
196KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
196KB
-
Filesize
4KB
-
Filesize
172KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
172KB
-
Filesize
196KB
-
Filesize
196KB