Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
146s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
05/01/2024, 02:03
Behavioral task
behavioral1
Sample
427d7fb78dd1bca8f963725e9c78bfa3.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
427d7fb78dd1bca8f963725e9c78bfa3.exe
Resource
win10v2004-20231222-en
General
-
Target
427d7fb78dd1bca8f963725e9c78bfa3.exe
-
Size
361KB
-
MD5
427d7fb78dd1bca8f963725e9c78bfa3
-
SHA1
00d75aab0eddf79c12bae091cf4f65390ae28b83
-
SHA256
99cb7b548be4fbca2bbaf33fa3a5c2a6f6e132ff487684093d991d23930a5614
-
SHA512
94b9bfe71a46415eb7151322af0be59355e7f32afa891b5ca1ae1a226d26478c98fdab4bcbcf64746e2219458f2e32e16a41b9bf967694d412a11c0a92057737
-
SSDEEP
6144:L4XrK9PX7Fp6Gh2wWRGl0EDDf1PisZQ5rAGQwg1QtP1f4paaYlsdcaMJEdbI0PzV:UXe9PPlowWX0t6mOQwg1Qd15CcYk0WeF
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/1220-0-0x0000000000990000-0x0000000000A75000-memory.dmp upx behavioral2/memory/1220-8-0x0000000000990000-0x0000000000A75000-memory.dmp upx -
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule behavioral2/memory/1220-8-0x0000000000990000-0x0000000000A75000-memory.dmp autoit_exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).