Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
134s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
31/12/2023, 01:53
Static task
static1
Behavioral task
behavioral1
Sample
2379c0080d8def684c094ccf5cb0e649.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2379c0080d8def684c094ccf5cb0e649.exe
Resource
win10v2004-20231215-en
General
-
Target
2379c0080d8def684c094ccf5cb0e649.exe
-
Size
75KB
-
MD5
2379c0080d8def684c094ccf5cb0e649
-
SHA1
f825744d9278396416a3b4b267d5a0826ce6107e
-
SHA256
0a244f576e7241de6d3145eda0e94375be7919479826316ca0943a71e9e9e371
-
SHA512
a1594f0825d9e3232fbe7e2cb588db22259d7c51ef74a3f68fb0984b4704ea15ce0fa3bb4a3d0611a6b8ebd0d72d121fb8c865f43b6fdcb694e7a8421c008d76
-
SSDEEP
1536:9OY499DAG7T7P8e6sL+AmWzNzRPOWLK6AoTtBaBCO8lrJYCRLC:954Dn7vv62mWRzgcAoTtBzRrYCRLC
Malware Config
Signatures
-
Drops file in Drivers directory 1 IoCs
description ioc Process File created C:\Windows\SysWOW64\drivers\ltfmqp.sys 2379c0080d8def684c094ccf5cb0e649.exe -
Loads dropped DLL 1 IoCs
pid Process 1560 2379c0080d8def684c094ccf5cb0e649.exe -
Drops file in System32 directory 2 IoCs
description ioc Process File created C:\Windows\SysWOW64\ltfmqp.dll 2379c0080d8def684c094ccf5cb0e649.exe File created C:\Windows\SysWOW64\00447fd.imi 2379c0080d8def684c094ccf5cb0e649.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
94KB
MD55720cade1b482da5f8b217434ee778e3
SHA1d5d49847921dde0dcd423d6c8847310da1970419
SHA25692ce672ee4b10df6a0e7e17f94874e5159d3f0e6df4b386d7ffbb5195dcd639a
SHA5124241f52b2ac1874ea7c8116f10de47146b046f97a9b0a9b2c1ae7b2281b3cd062e0ee0696883bff96c88203423ef43c6a2cd6add18ab61d49658393426450f33