Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    138s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30/12/2023, 03:10

General

  • Target

    0c92bce122497ee0d6d5bb5147c910b8.exe

  • Size

    348KB

  • MD5

    0c92bce122497ee0d6d5bb5147c910b8

  • SHA1

    a7d41b9b60547d8409c1b377988af9f2f4efb040

  • SHA256

    412479677216932766db7c912ffd9dd356a19e771e33f510f4b64a8b56d1c812

  • SHA512

    11fd050567627ec869497326274ba8f2915a86eef2b844d3b3329ba937148b4f9a8004048f32cc5ba2d2a287780e56afd49c09a1cbc5cbd5c627fe37b6d5a575

  • SSDEEP

    6144:HO+TyiE8+aqCjToXVpGOZcWixTmAcThAkZThMTM9:JXEkqeolrix1c60y+

Score
6/10

Malware Config

Signatures

  • Drops desktop.ini file(s) 4 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0c92bce122497ee0d6d5bb5147c910b8.exe
    "C:\Users\Admin\AppData\Local\Temp\0c92bce122497ee0d6d5bb5147c910b8.exe"
    1⤵
    • Drops desktop.ini file(s)
    • Drops file in Program Files directory
    PID:4976
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 4976 -s 1020
      2⤵
      • Program crash
      PID:1644
  • C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4976 -ip 4976
    1⤵
      PID:4396

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Program Files\7-Zip\7-zip.chm

      Filesize

      460KB

      MD5

      b5569e6846374f0a56909cc39dbd5ccc

      SHA1

      3cde8713d23aa21d775bf66c174af4a7a06a065f

      SHA256

      a3f5875328250405a0bd95bad44f35e377dce4f35b96c0787802c0cdd035c401

      SHA512

      704db9ea2502fb3504fbabfccbb8f1af728e0c5473f6d0d404c870206c18d1e4c5c6c247cf7dd9d7ef6d6438374cd835de90d9efe6a6572da53f3f85399108cf

    • C:\Program Files\Java\jre-1.8\bin\glass.dll

      Filesize

      5B

      MD5

      b5b682b742431a52ea8b17c72ad9c572

      SHA1

      326320f469235708c59f678c9a7357dca552d306

      SHA256

      30d9045a9f172208b13161d1f5204e5787e5e07bfbb4f490d0041b03b7f44f76

      SHA512

      4e1bd7cc616b3115baf6be7ebd29fe2d1123bc0f25464865a0cf9207b0344fba70747a5ce6f00e8d9c696881f6db1e12f81736bc748b6f2b60bf84c681a49163

    • memory/4976-0-0x0000000000400000-0x000000000040B000-memory.dmp

      Filesize

      44KB

    • memory/4976-2018-0x0000000000400000-0x000000000040B000-memory.dmp

      Filesize

      44KB