Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    157s
  • max time network
    168s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    31/12/2023, 13:14

General

  • Target

    37860902af016c6b02e7595b96b425c8.exe

  • Size

    255KB

  • MD5

    37860902af016c6b02e7595b96b425c8

  • SHA1

    2267c13a38ad187a57bf22a28a028e5fee7bd1ca

  • SHA256

    15b1813c81d6a15c10612e8dc68cd1fe56cb574c8b33fc36f051b98f52b6b823

  • SHA512

    7b1826c367e5e01444abf42b9321064cd430955cb7cd5bbc48d6eb765929e0e4608ee9fd31c82f6ceeb464bf132ccff8b4b845a27a1751900b8f1c45127c46ed

  • SSDEEP

    6144:Hl48X7/jbFzgd1gYWyF966fSdgewsVeMnnkOmh7GCMlq:HW8rrRg1/v9R6dgdOesnkO66Vlq

Score
6/10

Malware Config

Signatures

  • Maps connected drives based on registry 3 TTPs 2 IoCs

    Disk information is often read in order to detect sandboxing environments.

  • Drops file in Windows directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\37860902af016c6b02e7595b96b425c8.exe
    "C:\Users\Admin\AppData\Local\Temp\37860902af016c6b02e7595b96b425c8.exe"
    1⤵
    • Maps connected drives based on registry
    • Drops file in Windows directory
    PID:1588

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1588-0-0x0000000000FB0000-0x0000000000FB1000-memory.dmp

    Filesize

    4KB

  • memory/1588-1-0x0000000000FC0000-0x0000000000FC1000-memory.dmp

    Filesize

    4KB

  • memory/1588-2-0x0000000000FD0000-0x0000000000FD1000-memory.dmp

    Filesize

    4KB

  • memory/1588-3-0x0000000000FE0000-0x0000000000FE1000-memory.dmp

    Filesize

    4KB

  • memory/1588-4-0x0000000001050000-0x0000000001079000-memory.dmp

    Filesize

    164KB

  • memory/1588-5-0x0000000001190000-0x00000000011BF000-memory.dmp

    Filesize

    188KB

  • memory/1588-9-0x0000000001050000-0x0000000001079000-memory.dmp

    Filesize

    164KB

  • memory/1588-12-0x00000000011D0000-0x00000000011F7000-memory.dmp

    Filesize

    156KB

  • memory/1588-16-0x0000000001050000-0x0000000001079000-memory.dmp

    Filesize

    164KB

  • memory/1588-18-0x0000000001050000-0x0000000001079000-memory.dmp

    Filesize

    164KB

  • memory/1588-25-0x0000000001050000-0x0000000001079000-memory.dmp

    Filesize

    164KB