Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    145s
  • max time network
    167s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05/01/2024, 12:31

General

  • Target

    43b0c5988a73db725d1f4f975c1de11c.exe

  • Size

    1.1MB

  • MD5

    43b0c5988a73db725d1f4f975c1de11c

  • SHA1

    cd519f1f92fbe0cc6f6cc0b170a910455862838d

  • SHA256

    066687f51b9bf88217f7abef257679622a0caaf9be12878241a219435d22a21d

  • SHA512

    c7424fb8dbe9885bb57e53bf4a1882d5f8ff7927d69c7662af26c156c25affe9b415b5f337532f4ff38004a857c10487257e59b2fefce4840816718c3f15eeaa

  • SSDEEP

    24576:VWvknOMEfqmINsg9x+nAzw+eoJb/t/2Pzk/kVnaozLzcpNN+n:VUeOMmMswkAzHlmjaonQ9+n

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies Internet Explorer settings 1 TTPs 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\43b0c5988a73db725d1f4f975c1de11c.exe
    "C:\Users\Admin\AppData\Local\Temp\43b0c5988a73db725d1f4f975c1de11c.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4940
    • C:\Users\Admin\AppData\Local\Temp\a2PIf6k36Q\OB6ABJA0\Setup.exe
      C:\Users\Admin\AppData\Local\Temp\a2PIf6k36Q\OB6ABJA0\Setup.exe --relaunch
      2⤵
      • Executes dropped EXE
      • Modifies Internet Explorer settings
      PID:400

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\a2PIf6k36Q\OB6ABJA0\Setup.exe

    Filesize

    1.1MB

    MD5

    43b0c5988a73db725d1f4f975c1de11c

    SHA1

    cd519f1f92fbe0cc6f6cc0b170a910455862838d

    SHA256

    066687f51b9bf88217f7abef257679622a0caaf9be12878241a219435d22a21d

    SHA512

    c7424fb8dbe9885bb57e53bf4a1882d5f8ff7927d69c7662af26c156c25affe9b415b5f337532f4ff38004a857c10487257e59b2fefce4840816718c3f15eeaa

  • memory/400-426-0x0000000000400000-0x000000000051ED14-memory.dmp

    Filesize

    1.1MB

  • memory/400-619-0x0000000002090000-0x000000000218E000-memory.dmp

    Filesize

    1016KB

  • memory/400-830-0x0000000002090000-0x000000000218E000-memory.dmp

    Filesize

    1016KB

  • memory/400-839-0x0000000002090000-0x000000000218E000-memory.dmp

    Filesize

    1016KB

  • memory/4940-33-0x00000000022B0000-0x00000000023AE000-memory.dmp

    Filesize

    1016KB

  • memory/4940-37-0x00000000022B0000-0x00000000023AE000-memory.dmp

    Filesize

    1016KB

  • memory/4940-1-0x00000000022B0000-0x00000000023AE000-memory.dmp

    Filesize

    1016KB

  • memory/4940-7-0x00000000022B0000-0x00000000023AE000-memory.dmp

    Filesize

    1016KB

  • memory/4940-8-0x00000000022B0000-0x00000000023AE000-memory.dmp

    Filesize

    1016KB

  • memory/4940-9-0x0000000000400000-0x000000000051ED14-memory.dmp

    Filesize

    1.1MB

  • memory/4940-10-0x00000000022B0000-0x00000000023AE000-memory.dmp

    Filesize

    1016KB

  • memory/4940-12-0x00000000022B0000-0x00000000023AE000-memory.dmp

    Filesize

    1016KB

  • memory/4940-11-0x00000000022B0000-0x00000000023AE000-memory.dmp

    Filesize

    1016KB

  • memory/4940-13-0x00000000022B0000-0x00000000023AE000-memory.dmp

    Filesize

    1016KB

  • memory/4940-14-0x00000000022B0000-0x00000000023AE000-memory.dmp

    Filesize

    1016KB

  • memory/4940-16-0x00000000022B0000-0x00000000023AE000-memory.dmp

    Filesize

    1016KB

  • memory/4940-15-0x00000000022B0000-0x00000000023AE000-memory.dmp

    Filesize

    1016KB

  • memory/4940-17-0x00000000022B0000-0x00000000023AE000-memory.dmp

    Filesize

    1016KB

  • memory/4940-18-0x00000000022B0000-0x00000000023AE000-memory.dmp

    Filesize

    1016KB

  • memory/4940-19-0x00000000022B0000-0x00000000023AE000-memory.dmp

    Filesize

    1016KB

  • memory/4940-20-0x00000000022B0000-0x00000000023AE000-memory.dmp

    Filesize

    1016KB

  • memory/4940-21-0x00000000022B0000-0x00000000023AE000-memory.dmp

    Filesize

    1016KB

  • memory/4940-22-0x00000000022B0000-0x00000000023AE000-memory.dmp

    Filesize

    1016KB

  • memory/4940-25-0x00000000022B0000-0x00000000023AE000-memory.dmp

    Filesize

    1016KB

  • memory/4940-24-0x00000000022B0000-0x00000000023AE000-memory.dmp

    Filesize

    1016KB

  • memory/4940-28-0x00000000022B0000-0x00000000023AE000-memory.dmp

    Filesize

    1016KB

  • memory/4940-27-0x00000000022B0000-0x00000000023AE000-memory.dmp

    Filesize

    1016KB

  • memory/4940-29-0x00000000022B0000-0x00000000023AE000-memory.dmp

    Filesize

    1016KB

  • memory/4940-26-0x00000000022B0000-0x00000000023AE000-memory.dmp

    Filesize

    1016KB

  • memory/4940-30-0x00000000022B0000-0x00000000023AE000-memory.dmp

    Filesize

    1016KB

  • memory/4940-31-0x00000000022B0000-0x00000000023AE000-memory.dmp

    Filesize

    1016KB

  • memory/4940-32-0x00000000022B0000-0x00000000023AE000-memory.dmp

    Filesize

    1016KB

  • memory/4940-23-0x00000000022B0000-0x00000000023AE000-memory.dmp

    Filesize

    1016KB

  • memory/4940-0-0x00000000022B0000-0x00000000023AE000-memory.dmp

    Filesize

    1016KB

  • memory/4940-34-0x00000000022B0000-0x00000000023AE000-memory.dmp

    Filesize

    1016KB

  • memory/4940-35-0x00000000022B0000-0x00000000023AE000-memory.dmp

    Filesize

    1016KB

  • memory/4940-2-0x0000000000400000-0x000000000051ED14-memory.dmp

    Filesize

    1.1MB

  • memory/4940-38-0x00000000022B0000-0x00000000023AE000-memory.dmp

    Filesize

    1016KB

  • memory/4940-36-0x00000000022B0000-0x00000000023AE000-memory.dmp

    Filesize

    1016KB

  • memory/4940-40-0x00000000022B0000-0x00000000023AE000-memory.dmp

    Filesize

    1016KB

  • memory/4940-39-0x00000000022B0000-0x00000000023AE000-memory.dmp

    Filesize

    1016KB

  • memory/4940-41-0x00000000022B0000-0x00000000023AE000-memory.dmp

    Filesize

    1016KB

  • memory/4940-42-0x00000000022B0000-0x00000000023AE000-memory.dmp

    Filesize

    1016KB

  • memory/4940-43-0x00000000022B0000-0x00000000023AE000-memory.dmp

    Filesize

    1016KB

  • memory/4940-44-0x00000000022B0000-0x00000000023AE000-memory.dmp

    Filesize

    1016KB

  • memory/4940-46-0x00000000022B0000-0x00000000023AE000-memory.dmp

    Filesize

    1016KB

  • memory/4940-45-0x00000000022B0000-0x00000000023AE000-memory.dmp

    Filesize

    1016KB

  • memory/4940-47-0x00000000022B0000-0x00000000023AE000-memory.dmp

    Filesize

    1016KB

  • memory/4940-48-0x00000000022B0000-0x00000000023AE000-memory.dmp

    Filesize

    1016KB

  • memory/4940-49-0x00000000022B0000-0x00000000023AE000-memory.dmp

    Filesize

    1016KB

  • memory/4940-50-0x00000000022B0000-0x00000000023AE000-memory.dmp

    Filesize

    1016KB

  • memory/4940-51-0x00000000022B0000-0x00000000023AE000-memory.dmp

    Filesize

    1016KB

  • memory/4940-52-0x00000000022B0000-0x00000000023AE000-memory.dmp

    Filesize

    1016KB

  • memory/4940-54-0x00000000022B0000-0x00000000023AE000-memory.dmp

    Filesize

    1016KB

  • memory/4940-55-0x00000000022B0000-0x00000000023AE000-memory.dmp

    Filesize

    1016KB

  • memory/4940-56-0x00000000022B0000-0x00000000023AE000-memory.dmp

    Filesize

    1016KB

  • memory/4940-53-0x00000000022B0000-0x00000000023AE000-memory.dmp

    Filesize

    1016KB

  • memory/4940-57-0x00000000022B0000-0x00000000023AE000-memory.dmp

    Filesize

    1016KB

  • memory/4940-58-0x00000000022B0000-0x00000000023AE000-memory.dmp

    Filesize

    1016KB

  • memory/4940-59-0x00000000022B0000-0x00000000023AE000-memory.dmp

    Filesize

    1016KB

  • memory/4940-60-0x00000000022B0000-0x00000000023AE000-memory.dmp

    Filesize

    1016KB

  • memory/4940-61-0x00000000022B0000-0x00000000023AE000-memory.dmp

    Filesize

    1016KB

  • memory/4940-62-0x00000000022B0000-0x00000000023AE000-memory.dmp

    Filesize

    1016KB

  • memory/4940-64-0x00000000022B0000-0x00000000023AE000-memory.dmp

    Filesize

    1016KB

  • memory/4940-65-0x00000000022B0000-0x00000000023AE000-memory.dmp

    Filesize

    1016KB

  • memory/4940-63-0x00000000022B0000-0x00000000023AE000-memory.dmp

    Filesize

    1016KB

  • memory/4940-202-0x00000000022B0000-0x00000000023AE000-memory.dmp

    Filesize

    1016KB

  • memory/4940-405-0x00000000022B0000-0x00000000023AE000-memory.dmp

    Filesize

    1016KB

  • memory/4940-848-0x00000000022B0000-0x00000000023AE000-memory.dmp

    Filesize

    1016KB