Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
146s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
29/12/2023, 19:09
General
-
Target
0146d7298802931da9acb5b0050d0063.exe
-
Size
82KB
-
MD5
0146d7298802931da9acb5b0050d0063
-
SHA1
7f092530609baa416e263bd78509cf4f2059605b
-
SHA256
a12d0cf8f8cd5c2abdda31b33f1a967e993b2976c5635461314917a279a01a86
-
SHA512
46925d7ea72f37b8dadab45c6681335d56bd7ff108e717a37252b8b6d24017ab97bccb27b9f7357a6593840af50458791cd9084f68065b9009d14f2f73379b80
-
SSDEEP
1536:dIZvSK6RxOPPD+XgHcISECbcoZow+8LWqqJDXtxvgRzdNTq3Wy+3:2gFOCZEEc1w+nZJ7Py3P
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0146d7298802931da9acb5b0050d0063.exe"C:\Users\Admin\AppData\Local\Temp\0146d7298802931da9acb5b0050d0063.exe"1⤵
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\0146d7298802931da9acb5b0050d0063.exeC:\Users\Admin\AppData\Local\Temp\0146d7298802931da9acb5b0050d0063.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
56KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
108KB
-
Filesize
188KB