Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    0s
  • max time network
    142s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30/12/2023, 04:05

General

  • Target

    0ddc2abd3ee140b684f2b92da592ca0b.exe

  • Size

    557KB

  • MD5

    0ddc2abd3ee140b684f2b92da592ca0b

  • SHA1

    60a2aaf5dea270cb9d80028733e3fddbb59dd72a

  • SHA256

    ec673a1179b2b689778fa4bed148206b42eaca3ee44eed8dd00c7e627fddccde

  • SHA512

    90741cbab4e5563bf27beae50dcc5d723a5a22ed59f50d5887a803dc8016ac2b59b036249e2489d6def0c2b554f08174eeb04ff606311ccca45877be4e4adbcd

  • SSDEEP

    12288:VGpJuEgtdy3qj3VyKoLRZwpdhcZ19C69BW/PICOLZG8ebqHiMMTj:VGpYhtj3ViRWpdh097DW/PLOLZG8ebi0

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 19 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0ddc2abd3ee140b684f2b92da592ca0b.exe
    "C:\Users\Admin\AppData\Local\Temp\0ddc2abd3ee140b684f2b92da592ca0b.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:3248

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\ish240602828\images\progress-bg.png

    Filesize

    2KB

    MD5

    32a6846fe53388eb03be3ada2221297f

    SHA1

    1c1baec7b7fe7a420ccf68d3112384b44f8ba89e

    SHA256

    5c6d20c98c106bc6df49447b9939a90ba6a5e3c20d89ca0621677a7501bdb127

    SHA512

    79c4f3a72467b61c27d6e93415bae3fc61a9fde62aae4202ba8ed1de6328f5facc48092bfe57db70338a0a4b50f571d501eed04aed8b047d20aa28ee7446ce98

  • memory/3248-158-0x0000000000720000-0x0000000000721000-memory.dmp

    Filesize

    4KB

  • memory/3248-161-0x0000000000400000-0x0000000000522000-memory.dmp

    Filesize

    1.1MB

  • memory/3248-1-0x0000000000400000-0x0000000000522000-memory.dmp

    Filesize

    1.1MB

  • memory/3248-2-0x0000000000400000-0x0000000000522000-memory.dmp

    Filesize

    1.1MB

  • memory/3248-154-0x0000000000400000-0x0000000000522000-memory.dmp

    Filesize

    1.1MB

  • memory/3248-155-0x0000000000400000-0x0000000000522000-memory.dmp

    Filesize

    1.1MB

  • memory/3248-156-0x0000000000400000-0x0000000000522000-memory.dmp

    Filesize

    1.1MB

  • memory/3248-157-0x0000000000400000-0x0000000000522000-memory.dmp

    Filesize

    1.1MB

  • memory/3248-0-0x0000000000400000-0x0000000000522000-memory.dmp

    Filesize

    1.1MB

  • memory/3248-159-0x0000000000400000-0x0000000000522000-memory.dmp

    Filesize

    1.1MB

  • memory/3248-160-0x0000000000400000-0x0000000000522000-memory.dmp

    Filesize

    1.1MB

  • memory/3248-3-0x0000000000720000-0x0000000000721000-memory.dmp

    Filesize

    4KB

  • memory/3248-163-0x0000000000400000-0x0000000000522000-memory.dmp

    Filesize

    1.1MB

  • memory/3248-164-0x0000000000400000-0x0000000000522000-memory.dmp

    Filesize

    1.1MB

  • memory/3248-165-0x0000000000400000-0x0000000000522000-memory.dmp

    Filesize

    1.1MB

  • memory/3248-166-0x0000000000400000-0x0000000000522000-memory.dmp

    Filesize

    1.1MB

  • memory/3248-167-0x0000000000400000-0x0000000000522000-memory.dmp

    Filesize

    1.1MB

  • memory/3248-168-0x0000000000400000-0x0000000000522000-memory.dmp

    Filesize

    1.1MB

  • memory/3248-169-0x0000000000400000-0x0000000000522000-memory.dmp

    Filesize

    1.1MB

  • memory/3248-170-0x0000000000400000-0x0000000000522000-memory.dmp

    Filesize

    1.1MB

  • memory/3248-171-0x0000000000400000-0x0000000000522000-memory.dmp

    Filesize

    1.1MB