Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
111s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
-
submitted
31/12/2023, 03:46
General
-
Target
26d96bb3941caa33eaceb792a7a912a6.exe
-
Size
82KB
-
MD5
26d96bb3941caa33eaceb792a7a912a6
-
SHA1
42404bb945000ec0c0a4afc7d9ac263eeb2d5138
-
SHA256
5bf82211dcdae39c7c92c71ba1fa5c9bb037fd43400eccb499317af0664a106a
-
SHA512
ef7f33ba6484045a612d28d6fe06f9af877e4868a4e479e57f9446838a5cc57c4a8fa1913a953f6e04b279e8f34fc21b5de470092c6ae5929f3b0ba6a601c09a
-
SSDEEP
1536:8xnn664v//Yw+3rK/X3iPhP1PZDvO/l1rXhL78aavo7mdH04mWgPTX4r:Yn6v/Aw+7K/XSPTVvM1L79Bi04N4TX4r
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\26d96bb3941caa33eaceb792a7a912a6.exe"C:\Users\Admin\AppData\Local\Temp\26d96bb3941caa33eaceb792a7a912a6.exe"1⤵
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\26d96bb3941caa33eaceb792a7a912a6.exeC:\Users\Admin\AppData\Local\Temp\26d96bb3941caa33eaceb792a7a912a6.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
37KB
MD5530a87d44135d4d203430bd1148c4750
SHA17c590133381d277f94569f138c64e73235168106
SHA256c475e60aa83e3095455c1b71b2539163ff1311ec42a115f1f7052425a4092a14
SHA512919b5c851ec1cf541417a31dad2520cb1bb9080c395e561dce37d7663c8a4284bbedb8a504f9040ddbbdc862dc1f1637c2d75582112b84bd4334322a85d22e18
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
56KB
-
Filesize
108KB
-
Filesize
188KB