Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

0ba2b56cab...e2.exe

windows7-x64

7

0ba2b56cab...e2.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    169s
  • max time network
    178s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30/12/2023, 02:27

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    0ba2b56cab43eac8cf6d281a14e06ce2.exe

  • Size

    297KB

  • MD5

    0ba2b56cab43eac8cf6d281a14e06ce2

  • SHA1

    0920a6d274f06078877f91c838268c3be40f91b2

  • SHA256

    21b5a79d3450fd8b0b98f5f0dfbdb4a64b01aab31b7b5dddf4a8b5a4c56ffbd2

  • SHA512

    77b97f59709a2179939868d4f491683bebf0cb4d6590f54a31c3a900dba9927d6015352e1275422f8ea1a45f9e464b99a95984f86fede9ca3c72cec459f7b1c1

  • SSDEEP

    6144:OgsX5w78W1xrLitFHIp1TP6IUIJxgSQZf3AEfk3COjB8tgnFKzEsTh5/V18j:OgU5w7dxv6FH6l6IUFvA0iCOV8tWM7T4

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0ba2b56cab43eac8cf6d281a14e06ce2.exe
    "C:\Users\Admin\AppData\Local\Temp\0ba2b56cab43eac8cf6d281a14e06ce2.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: EnumeratesProcesses
    PID:3680

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\Tsu9177B2CC.dll
    Filesize

    267KB

    MD5

    138810868216da6c31f1c3faa4e3ff4c

    SHA1

    076f99ef5a4a6c3f32b9ab282de0b66b49afd860

    SHA256

    23f073d05ef6165f38dd5b438d04131f4b95544f1c19ce8230f3ddd1dfe58dce

    SHA512

    e7eea1a8bd66a4e1e91229d31afde034af7be881603e608171ca37e5802eb726be31c23d46af5538f408c01db7687768e04ec056512fd8afb2d979676ad25c3c

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\{B2DC091D-B0FA-46A7-A44C-F8D8693F2BEB}\_Setup.dll
    Filesize

    67KB

    MD5

    0cbfed594cd336ba049b56cb96bc87cf

    SHA1

    b485fe471e53c10becc91aaab7ee79238f55c3d9

    SHA256

    eff22ae1c0a18aa4cfabf7830b09ed777094831b0f754071493a4d77d772edac

    SHA512

    3cab962e2b0acbc377ebe3f5e66411c4de8d8708414edcc7baccc5b75cd11162d33a6c967c570c6599d7c4545c922aa18be6a9fb67dd1134ee19226c8d480899

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\{B2DC091D-B0FA-46A7-A44C-F8D8693F2BEB}\_Setupx.dll
    Filesize

    41KB

    MD5

    843f4d1d1be64498c4196c132632f3ba

    SHA1

    8cd9f716ed67120922c9be5818b9fd61b54463fc

    SHA256

    d5747163be5fcb740562b5e4fd428d652790d73b126af9f54318bbe23c3f1048

    SHA512

    ae169b7bf6c3941c70c9804c57b05b02f5ee6a392a571f45252dfd269189d2cd44170f7c3a962f6dfbc739636f61bef7f01524f5ac208e9ecc5f43c6e0d12705

    Download Submit