Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
30/12/2023, 12:47
General
-
Target
BTlink.exe
-
Size
2.0MB
-
MD5
9b23a2511cf70ded727402946cb7097c
-
SHA1
f989f80aa86925581777db843d7ae7dbe9c5c1b0
-
SHA256
3da6ab46118c2be121d3047af70a70f1ecd7cc95bb74f4a68274d7b626991801
-
SHA512
d60170006f54afe38f6bd5157aa4b8eef7fc52b9cbd91a80c3208f2fecff01724575173c39840629ede98a1343fe9131e72244cd63da6f6702a74867a127460c
-
SSDEEP
49152:G9HTONC9+ip/BlnEqxTUaw/iMIf/keAvK6SwWs6AWn1Hx24nTmB:Q6Nyr/LTbw+/6KfwV611Xw
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\BTlink.exe"C:\Users\Admin\AppData\Local\Temp\BTlink.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\is-TQ7G1.tmp\BTlink.tmp"C:\Users\Admin\AppData\Local\Temp\is-TQ7G1.tmp\BTlink.tmp" /SL5="$100030,1897217,56320,C:\Users\Admin\AppData\Local\Temp\BTlink.exe"2⤵
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
694KB
MD5ddb64d74512e9e2f246468209f3f41d8
SHA191d9026fb2269680d7e05e1b4cd4b47f84daf651
SHA25690f4aaead5b4fe9a8f74c378c8e862bd3ea3dd772f9d9bbaa2d3ef230a05752d
SHA512f8956fa29f6b84ca94eb1cc864483b0849a96c7a47091f2e75704b268881325cc60f9f73cf65418c0940f5b7bd0c50ee7660ad9c23514f09b127f2f1ee631299
-
Filesize
80KB
-
Filesize
80KB
-
Filesize
80KB
-
Filesize
4KB
-
Filesize
756KB
-
Filesize
4KB