Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    191s
  • max time network
    299s
  • platform
    windows10-1703_x64
  • resource
    win10-20231215-en
  • resource tags

    arch:x64arch:x86image:win10-20231215-enlocale:en-usos:windows10-1703-x64system
  • submitted
    01/01/2024, 04:53

General

  • Target

    46ac560bd41d788af8d2be6f23d2595d7eff45263904f86deced79bd2e1e883c.exe

  • Size

    3.1MB

  • MD5

    cacb4dfc54ad9dd54fd382887551f1e3

  • SHA1

    81d45cae7384d561baf2ec7e511bb2a740f881f8

  • SHA256

    46ac560bd41d788af8d2be6f23d2595d7eff45263904f86deced79bd2e1e883c

  • SHA512

    5a6096948b75dce8c895464da2b48009aa94a589ccbbf4308ed6643d7a612c47903b0d0bf940d806819d7ced23f4dc05f49a7ba70177f2d8c1de450ecf0a7477

  • SSDEEP

    98304:L+a4kPqzbcj3eR0PmO40PvQ4q7IVH8eRjoM:WFbc9l40Q4tVH8WoM

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\46ac560bd41d788af8d2be6f23d2595d7eff45263904f86deced79bd2e1e883c.exe
    "C:\Users\Admin\AppData\Local\Temp\46ac560bd41d788af8d2be6f23d2595d7eff45263904f86deced79bd2e1e883c.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:2944

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2944-1-0x0000000001280000-0x000000000178D000-memory.dmp

    Filesize

    5.1MB

  • memory/2944-7-0x0000000001200000-0x0000000001201000-memory.dmp

    Filesize

    4KB

  • memory/2944-6-0x00000000011F0000-0x00000000011F1000-memory.dmp

    Filesize

    4KB

  • memory/2944-13-0x0000000001210000-0x0000000001250000-memory.dmp

    Filesize

    256KB

  • memory/2944-12-0x0000000001210000-0x0000000001250000-memory.dmp

    Filesize

    256KB

  • memory/2944-11-0x0000000001210000-0x0000000001250000-memory.dmp

    Filesize

    256KB

  • memory/2944-10-0x0000000001280000-0x000000000178D000-memory.dmp

    Filesize

    5.1MB

  • memory/2944-5-0x00000000011E0000-0x00000000011E1000-memory.dmp

    Filesize

    4KB

  • memory/2944-4-0x0000000001280000-0x000000000178D000-memory.dmp

    Filesize

    5.1MB

  • memory/2944-3-0x00000000011D0000-0x00000000011D1000-memory.dmp

    Filesize

    4KB

  • memory/2944-2-0x00000000011A0000-0x00000000011A1000-memory.dmp

    Filesize

    4KB

  • memory/2944-0-0x0000000000B10000-0x0000000000B11000-memory.dmp

    Filesize

    4KB

  • memory/2944-14-0x0000000001210000-0x0000000001250000-memory.dmp

    Filesize

    256KB

  • memory/2944-15-0x0000000001210000-0x0000000001250000-memory.dmp

    Filesize

    256KB

  • memory/2944-16-0x0000000001280000-0x000000000178D000-memory.dmp

    Filesize

    5.1MB