Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
147s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
04/01/2024, 14:33
General
-
Target
411d5ceb9469badb1bdddaf4de3eb512.exe
-
Size
1.3MB
-
MD5
411d5ceb9469badb1bdddaf4de3eb512
-
SHA1
107efd1e3862392b14b34feaf43fdbd2174ccb20
-
SHA256
51e78e79f46e599db5b004f5c2bc2921cf5da14abe0eac418b46a5803869805a
-
SHA512
c9f818bc8b132d45ed98b9009531cf707f7ce900e53bd2f8bab4de73b843f2c02eba3caec2938200e27a6216e55f2be47c53575fa2333c4493fbe83be27ae9ff
-
SSDEEP
24576:k3NQPBNZTVyOI4rJ2raFVwzfKjJ1upnIhf4vKSXv0Uj:euZTRI4V2raFRjJBuiQdj
Malware Config
Signatures
-
Checks BIOS information in registry 2 TTPs 1 IoCs
BIOS information is often read in order to detect sandboxing environments.
-
Loads dropped DLL 1 IoCs
-
Suspicious use of NtSetInformationThreadHideFromDebugger 64 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\411d5ceb9469badb1bdddaf4de3eb512.exe"C:\Users\Admin\AppData\Local\Temp\411d5ceb9469badb1bdddaf4de3eb512.exe"1⤵
- Checks BIOS information in registry
- Loads dropped DLL
- Suspicious use of NtSetInformationThreadHideFromDebugger
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1024B
MD512871388b682b159ddd85545302a289d
SHA176b47377da188fcfddeefa0f940287f1cce9885d
SHA256cc033f00e96cae1829e3a5c15150fe68a62f65440f1b158d9257370fbc488a9b
SHA512d60953b62d08e52fa2860db257e2bdbaa97e7eff7007617857f7b30a76f7c7ba81f8444d313a6ad496adbbaede5af1661e72522046789bb9aee1340f7ac12c7d
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
488KB
-
Filesize
2.1MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
4KB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
4KB