Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
153s -
max time network
121s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
30/12/2023, 09:37
General
-
Target
14aaf15f849d40a7fdcf8fd8a38508ca.exe
-
Size
82KB
-
MD5
14aaf15f849d40a7fdcf8fd8a38508ca
-
SHA1
8b7564daf5c53b249449b105cd441be8c894fde0
-
SHA256
6e686fef774d91387f28910c38caeb6bd5e0f21f5679fbb75cba2866e1c50a4d
-
SHA512
b29206419ce91b0dd80507e998c8ea65c4bb005e4e8566054623277a962e95cea6f42ea7e96efae3c4b26b9fa07b9cfb14936b2356162c008a1e1f1bc0651f1b
-
SSDEEP
1536:a31Uhz3bHWL9fj6FHZKXXyCUjw+byXeblg/DZdU83W+IXuXpg1:/hP2L9f25KXi1jwhublu9dU8G+Iei1
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\14aaf15f849d40a7fdcf8fd8a38508ca.exe"C:\Users\Admin\AppData\Local\Temp\14aaf15f849d40a7fdcf8fd8a38508ca.exe"1⤵
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\14aaf15f849d40a7fdcf8fd8a38508ca.exeC:\Users\Admin\AppData\Local\Temp\14aaf15f849d40a7fdcf8fd8a38508ca.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
108KB