Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    146s
  • max time network
    148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30/12/2023, 14:25

General

  • Target

    1b5a487bf2fd380a538bec52e0357f5c.exe

  • Size

    1.1MB

  • MD5

    1b5a487bf2fd380a538bec52e0357f5c

  • SHA1

    2fdcf6066ac6d1000cfccffbdbbef9354897b835

  • SHA256

    100195463cbd001de1f65ce9ca131f86c6c150f02a639d7a14ce6160923fc8d0

  • SHA512

    0564ef01cf38ba0ef326aa19556f00f94459c1d13b02eebdc1159728abb6b3c55adc0fe4027328880885ac11fa38087b9593b69766e38a678b39568349cebcd6

  • SSDEEP

    24576:OWvknOMEdkLrlbSeeiTC9DNJyZKyZFCigixeOxtiu2GQR7yS+:OUeOMckLr1eYCFNsDoijiBR7D+

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies Internet Explorer settings 1 TTPs 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1b5a487bf2fd380a538bec52e0357f5c.exe
    "C:\Users\Admin\AppData\Local\Temp\1b5a487bf2fd380a538bec52e0357f5c.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4500
    • C:\Users\Admin\AppData\Local\Temp\a20bQQvos8\ZqkOuY2Q\Setup.exe
      C:\Users\Admin\AppData\Local\Temp\a20bQQvos8\ZqkOuY2Q\Setup.exe --relaunch
      2⤵
      • Executes dropped EXE
      • Modifies Internet Explorer settings
      PID:4016

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4016-427-0x0000000000400000-0x000000000051EFCC-memory.dmp

    Filesize

    1.1MB

  • memory/4016-622-0x0000000002030000-0x000000000212D000-memory.dmp

    Filesize

    1012KB

  • memory/4016-837-0x0000000002030000-0x000000000212D000-memory.dmp

    Filesize

    1012KB

  • memory/4500-1-0x0000000002160000-0x000000000225D000-memory.dmp

    Filesize

    1012KB

  • memory/4500-8-0x0000000002160000-0x000000000225D000-memory.dmp

    Filesize

    1012KB

  • memory/4500-18-0x0000000002160000-0x000000000225D000-memory.dmp

    Filesize

    1012KB

  • memory/4500-27-0x0000000002160000-0x000000000225D000-memory.dmp

    Filesize

    1012KB

  • memory/4500-36-0x0000000002160000-0x000000000225D000-memory.dmp

    Filesize

    1012KB

  • memory/4500-46-0x0000000002160000-0x000000000225D000-memory.dmp

    Filesize

    1012KB

  • memory/4500-58-0x0000000002160000-0x000000000225D000-memory.dmp

    Filesize

    1012KB

  • memory/4500-65-0x0000000002160000-0x000000000225D000-memory.dmp

    Filesize

    1012KB

  • memory/4500-63-0x0000000002160000-0x000000000225D000-memory.dmp

    Filesize

    1012KB

  • memory/4500-64-0x0000000002160000-0x000000000225D000-memory.dmp

    Filesize

    1012KB

  • memory/4500-62-0x0000000002160000-0x000000000225D000-memory.dmp

    Filesize

    1012KB

  • memory/4500-61-0x0000000002160000-0x000000000225D000-memory.dmp

    Filesize

    1012KB

  • memory/4500-60-0x0000000002160000-0x000000000225D000-memory.dmp

    Filesize

    1012KB

  • memory/4500-59-0x0000000002160000-0x000000000225D000-memory.dmp

    Filesize

    1012KB

  • memory/4500-57-0x0000000002160000-0x000000000225D000-memory.dmp

    Filesize

    1012KB

  • memory/4500-56-0x0000000002160000-0x000000000225D000-memory.dmp

    Filesize

    1012KB

  • memory/4500-55-0x0000000002160000-0x000000000225D000-memory.dmp

    Filesize

    1012KB

  • memory/4500-54-0x0000000002160000-0x000000000225D000-memory.dmp

    Filesize

    1012KB

  • memory/4500-203-0x0000000002160000-0x000000000225D000-memory.dmp

    Filesize

    1012KB

  • memory/4500-53-0x0000000002160000-0x000000000225D000-memory.dmp

    Filesize

    1012KB

  • memory/4500-52-0x0000000002160000-0x000000000225D000-memory.dmp

    Filesize

    1012KB

  • memory/4500-51-0x0000000002160000-0x000000000225D000-memory.dmp

    Filesize

    1012KB

  • memory/4500-50-0x0000000002160000-0x000000000225D000-memory.dmp

    Filesize

    1012KB

  • memory/4500-49-0x0000000002160000-0x000000000225D000-memory.dmp

    Filesize

    1012KB

  • memory/4500-48-0x0000000002160000-0x000000000225D000-memory.dmp

    Filesize

    1012KB

  • memory/4500-47-0x0000000002160000-0x000000000225D000-memory.dmp

    Filesize

    1012KB

  • memory/4500-45-0x0000000002160000-0x000000000225D000-memory.dmp

    Filesize

    1012KB

  • memory/4500-44-0x0000000002160000-0x000000000225D000-memory.dmp

    Filesize

    1012KB

  • memory/4500-43-0x0000000002160000-0x000000000225D000-memory.dmp

    Filesize

    1012KB

  • memory/4500-42-0x0000000002160000-0x000000000225D000-memory.dmp

    Filesize

    1012KB

  • memory/4500-41-0x0000000002160000-0x000000000225D000-memory.dmp

    Filesize

    1012KB

  • memory/4500-40-0x0000000002160000-0x000000000225D000-memory.dmp

    Filesize

    1012KB

  • memory/4500-39-0x0000000002160000-0x000000000225D000-memory.dmp

    Filesize

    1012KB

  • memory/4500-38-0x0000000002160000-0x000000000225D000-memory.dmp

    Filesize

    1012KB

  • memory/4500-37-0x0000000002160000-0x000000000225D000-memory.dmp

    Filesize

    1012KB

  • memory/4500-35-0x0000000002160000-0x000000000225D000-memory.dmp

    Filesize

    1012KB

  • memory/4500-34-0x0000000002160000-0x000000000225D000-memory.dmp

    Filesize

    1012KB

  • memory/4500-33-0x0000000002160000-0x000000000225D000-memory.dmp

    Filesize

    1012KB

  • memory/4500-32-0x0000000002160000-0x000000000225D000-memory.dmp

    Filesize

    1012KB

  • memory/4500-31-0x0000000002160000-0x000000000225D000-memory.dmp

    Filesize

    1012KB

  • memory/4500-30-0x0000000002160000-0x000000000225D000-memory.dmp

    Filesize

    1012KB

  • memory/4500-29-0x0000000002160000-0x000000000225D000-memory.dmp

    Filesize

    1012KB

  • memory/4500-28-0x0000000002160000-0x000000000225D000-memory.dmp

    Filesize

    1012KB

  • memory/4500-26-0x0000000002160000-0x000000000225D000-memory.dmp

    Filesize

    1012KB

  • memory/4500-25-0x0000000002160000-0x000000000225D000-memory.dmp

    Filesize

    1012KB

  • memory/4500-24-0x0000000002160000-0x000000000225D000-memory.dmp

    Filesize

    1012KB

  • memory/4500-23-0x0000000002160000-0x000000000225D000-memory.dmp

    Filesize

    1012KB

  • memory/4500-22-0x0000000002160000-0x000000000225D000-memory.dmp

    Filesize

    1012KB

  • memory/4500-21-0x0000000002160000-0x000000000225D000-memory.dmp

    Filesize

    1012KB

  • memory/4500-20-0x0000000002160000-0x000000000225D000-memory.dmp

    Filesize

    1012KB

  • memory/4500-19-0x0000000002160000-0x000000000225D000-memory.dmp

    Filesize

    1012KB

  • memory/4500-17-0x0000000002160000-0x000000000225D000-memory.dmp

    Filesize

    1012KB

  • memory/4500-16-0x0000000002160000-0x000000000225D000-memory.dmp

    Filesize

    1012KB

  • memory/4500-15-0x0000000002160000-0x000000000225D000-memory.dmp

    Filesize

    1012KB

  • memory/4500-13-0x0000000002160000-0x000000000225D000-memory.dmp

    Filesize

    1012KB

  • memory/4500-14-0x0000000002160000-0x000000000225D000-memory.dmp

    Filesize

    1012KB

  • memory/4500-12-0x0000000002160000-0x000000000225D000-memory.dmp

    Filesize

    1012KB

  • memory/4500-11-0x0000000002160000-0x000000000225D000-memory.dmp

    Filesize

    1012KB

  • memory/4500-9-0x0000000002160000-0x000000000225D000-memory.dmp

    Filesize

    1012KB

  • memory/4500-10-0x0000000000400000-0x000000000051EFCC-memory.dmp

    Filesize

    1.1MB

  • memory/4500-7-0x0000000002160000-0x000000000225D000-memory.dmp

    Filesize

    1012KB

  • memory/4500-5-0x0000000000400000-0x000000000051EFCC-memory.dmp

    Filesize

    1.1MB

  • memory/4500-0-0x0000000002160000-0x000000000225D000-memory.dmp

    Filesize

    1012KB

  • memory/4500-846-0x0000000002160000-0x000000000225D000-memory.dmp

    Filesize

    1012KB