Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    0s
  • max time network
    4s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01/01/2024, 16:10

General

  • Target

    3d4cdd5244bb14eca5a4f4384fd78590.exe

  • Size

    10.7MB

  • MD5

    3d4cdd5244bb14eca5a4f4384fd78590

  • SHA1

    08f347725e5aa2c0434733027d08095fc5a64d66

  • SHA256

    9520c20b1431811e993e8e54fd60a9e4d1f427aef3b78009d02bc6661379b6c5

  • SHA512

    577f6286b28abc2dd8de6aad114358a7f91d2f0e8db812e412e31f41dfde104a64f9c827522088f77158ee62447c101b89622fb87681ea8e195cddd32e8be53a

  • SSDEEP

    49152:EQFRHrmQG+yrV2JrmQG+yrVDAQG+yrVeUQG+yrV2JrmQG+yrVDAQG+UAQG+yrVeH:EcKvi/viA/wi/o

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\3d4cdd5244bb14eca5a4f4384fd78590.exe
    "C:\Users\Admin\AppData\Local\Temp\3d4cdd5244bb14eca5a4f4384fd78590.exe"
    1⤵
      PID:1608
      • C:\Users\Admin\AppData\Local\Temp\ugbyf.exe
        C:\Users\Admin\AppData\Local\Temp\ugbyf.exe -run C:\Users\Admin\AppData\Local\Temp\3d4cdd5244bb14eca5a4f4384fd78590.exe
        2⤵
          PID:4844

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/1608-0-0x0000000000400000-0x0000000000536000-memory.dmp

        Filesize

        1.2MB

      • memory/1608-4-0x0000000002380000-0x0000000002381000-memory.dmp

        Filesize

        4KB

      • memory/1608-5-0x00000000022A0000-0x00000000022A1000-memory.dmp

        Filesize

        4KB

      • memory/1608-3-0x00000000022C0000-0x00000000022C1000-memory.dmp

        Filesize

        4KB

      • memory/1608-11-0x0000000002570000-0x0000000002571000-memory.dmp

        Filesize

        4KB

      • memory/1608-30-0x0000000002E60000-0x0000000002F60000-memory.dmp

        Filesize

        1024KB

      • memory/1608-38-0x0000000002E60000-0x0000000002F60000-memory.dmp

        Filesize

        1024KB

      • memory/1608-43-0x0000000002E60000-0x0000000002F60000-memory.dmp

        Filesize

        1024KB

      • memory/1608-46-0x0000000002E60000-0x0000000002E61000-memory.dmp

        Filesize

        4KB

      • memory/1608-48-0x0000000000400000-0x0000000000536000-memory.dmp

        Filesize

        1.2MB