Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    144s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    31/12/2023, 13:23

General

  • Target

    37ddf2df569a283bb3c3e5577f868d0d.exe

  • Size

    304KB

  • MD5

    37ddf2df569a283bb3c3e5577f868d0d

  • SHA1

    53ca45659b6b017ea760828ad05a892ad5f0a0e1

  • SHA256

    49c2764153706cb165b85abaf8e9e2772514514b0f6965859d1382aba1049391

  • SHA512

    faf97663e4ff3355bf4b5cfa9519e5c508b426a2471882282c6931891e049b5a3638e1f0b93608365eb0b34127f1788c63566f9de7f91ef4db0080844d6daf03

  • SSDEEP

    6144:MrnV9UarEuMEvjr24HtrxTUGFVENoeLEa4c+FamYae99GODt4C15tsJVnDQwj:MrnV9jEsX2utrxAG7EN0IH//J4wWvD

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\37ddf2df569a283bb3c3e5577f868d0d.exe
    "C:\Users\Admin\AppData\Local\Temp\37ddf2df569a283bb3c3e5577f868d0d.exe"
    1⤵
    • Loads dropped DLL
    PID:1380

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\ProgramData\InstallMate\C9B56E9B\cfg\1.ini

    Filesize

    952B

    MD5

    44b5e720580c423fe7c5cebbcab45e11

    SHA1

    8d92a7df3e712b0459d154f0d71763e14ca0b74c

    SHA256

    23219b1609f0a534db40645adc945b1765542e471550b30c8f9b276ccdfd18b5

    SHA512

    d28710d1aa9ba14f36fc9019f0b5fe3208241d8d92a9a135f5e7cb0f3c417667f0919db1b60c60ffa0ccf61a593fff4569724e46d5f5f53254168d0b21409623

  • C:\ProgramData\InstallMate\C9B56E9B\cfg\1.ini

    Filesize

    952B

    MD5

    f7f9ace241c7770c308507d72ddb17b6

    SHA1

    ce9bcc7082f5dc6517bfbb9b45bcaf3af7d06b0c

    SHA256

    c864d2225bb342a7261129853eb74e9fe06fd3baf9fd9a4df4a31ccfbd9ae286

    SHA512

    31c837f875fb8ac1da550880c26de2d3d8c27558b4ba19faa8b4762d0123a54f6f57658afdd0e0072fa400dbb3a9fa72f73d9b6f155b2290cbb877a67f660a4a

  • C:\ProgramData\InstallMate\C9B56E9B\cfg\1.ini

    Filesize

    952B

    MD5

    72361feaf020d662bb24a2566025901f

    SHA1

    695753a198fcc582c12274a6c386b5552ec5d25a

    SHA256

    560301503c5436f3d14353bc64a0d1607d3c3d082db0b0925e47c4c668610da2

    SHA512

    864b86ef2c7e62bc534bed062000b8075bed79e5875cef0361c6ccbe2f4f648b398eaef10dc66699659b35e031832ea7bbaa563e80bde139fb0bbd173c87a33c

  • C:\Users\Admin\AppData\Local\Temp\Tsu36C67D07.dll

    Filesize

    267KB

    MD5

    d1ddd2bed23dd1e6a70855f5f7ba3e7b

    SHA1

    7c75eacc13fc2f225dfa9820ea306f6bbc891516

    SHA256

    e6f6af10a5d9496fda5f06b1dbc23f64ccda396b2fc219fd2464851edc003ba5

    SHA512

    d9647b1beffe978ef999e59417fbd6e9ce7fa7efbce690ce2039dd14bffbbdf8e18f56a529f1ce362a47b0b49121085afc6981e15b9177a3672e40de099369e1

  • C:\Users\Admin\AppData\Local\Temp\{B4328571-A686-45FE-A715-EEA46FD1A787}\_Setup.dll

    Filesize

    219KB

    MD5

    840dfd47ef11c7fe677507b9fa483b0e

    SHA1

    b11453b5ecbc1b81e7c11c6bfb54b9770f816d1d

    SHA256

    0ea85aaf61f87bc60a7879ade92611fc8d207f425f1a768cdc341ecd0746271b

    SHA512

    6187727f6ece7cc52e5143c5e38769ea67a7f545e22be2f1acd2c16b937500283f913d05ea6b9c525a194352cfa18464e3096c96c03780cdb8a23d387cb51f38

  • C:\Users\Admin\AppData\Local\Temp\{B4328571-A686-45FE-A715-EEA46FD1A787}\_Setupx.dll

    Filesize

    53KB

    MD5

    ce3b67e5923e1bc427e541b2a0a53cb4

    SHA1

    d3b521d5afd90ed22756dcecca63b4eec63e10a2

    SHA256

    6c2ef1a85b6cbe3993484af3a631c86d425279620b3c02593bf8364c8bca8318

    SHA512

    c7451789c5f4fcd3f30764e21d2f08a476e3ba4a20fe0d7954da48b06bcc2fd412bf49539d89e8b51f605418048d300457934a00a32921f222869ea9182d98be