Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    144s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05/01/2024, 11:02

General

  • Target

    setup.exe

  • Size

    4.0MB

  • MD5

    faf0fe56ac05d3f5a2b8748dd8b762cf

  • SHA1

    c2284e83ae61d061f7eea6cf0a7b625ad9928a2f

  • SHA256

    672a905069b8d03d2553454dc864a3b834998fc6253868b9b2c3126d962ae1d7

  • SHA512

    6aa42f0e7687c9f8bdeb5276469a6fed461b05ea870eecb228c8371de440dd1236f07435c4de67c1f770f6df529b1ab01ebfae07df6aeed7cbf938506777a934

  • SSDEEP

    98304:sXD1f4HZARBj7/1lOuRCRYGJelWMgEDWPw34GJrzn:WuSj7dVRiYGfwZDJ/

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\setup.exe
    "C:\Users\Admin\AppData\Local\Temp\setup.exe"
    1⤵
    • Loads dropped DLL
    PID:228

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\nsk543C.tmp\InstallOptions.dll

    Filesize

    12KB

    MD5

    9aff00ec14e6cb71a13451011c580077

    SHA1

    5972140e4a0addb9eac685fe6037da7479f23ecf

    SHA256

    cc8145683ad8fd77bd5cca193e84188e40d6d03a0a0d1d00e2bdbef91be96bb3

    SHA512

    311abd4e9927c1424d794ba401f3935ad3b108a2124e58e0d29aa946514c7a1d62b9b08b013699f4f90796bdfb6c07211daddbb521c1d20ccee771f6ea43b110

  • C:\Users\Admin\AppData\Local\Temp\nsk543C.tmp\ioSpecial.ini

    Filesize

    704B

    MD5

    93712c005eec662466aa8953b0ad19b2

    SHA1

    367346ba4067653f9b3cb41a1bc24f0ee5e78251

    SHA256

    f3f14234232b9d8b24f1bd5600d281d229093a6b2ae4ee20d19d91fddf83accd

    SHA512

    a997fbbf97fb82efa42d2ea2589960f09ead71e6db87e73c276f67736561cfbcd0b9087636caa180bb77714f75698780507b998ca7ae4fcb8156f6d6047282fc