Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05/01/2024, 20:53

General

  • Target

    446a62c394e577d3469bc569f193f5f1.exe

  • Size

    88KB

  • MD5

    446a62c394e577d3469bc569f193f5f1

  • SHA1

    fc40485761413313141f138b6d8824e15b33783d

  • SHA256

    25a6bfac4391785c956934d4d0a5d1ac248bf2e3cd6923cfc2792675d2550931

  • SHA512

    ded19b80211b7895228ede8d45097fd20f9fe2f490ed71d2b823dc14703044d6407f567243df3d6aabace382b7b4eeb973c471be4ea91fc40cb4076d679bfe33

  • SSDEEP

    1536:aMuFH+aKd/EsUzUVACD1LGLULKLdLaL7gW8ENVk4LBKa:W5+p/EsUAtNVX7

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\446a62c394e577d3469bc569f193f5f1.exe
    "C:\Users\Admin\AppData\Local\Temp\446a62c394e577d3469bc569f193f5f1.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4612
    • C:\Users\Admin\fuiufow.exe
      "C:\Users\Admin\fuiufow.exe"
      2⤵
        PID:4616

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\fuiufow.exe

      Filesize

      88KB

      MD5

      bdc0c3c9deb346e0c7198d4b2ee181e9

      SHA1

      88b4c28b1a1a0d7f766b0fef7bf8a1cc686ebadc

      SHA256

      3c026119be7e1a5a7443556f14326332b1105789c8806620c32b099470718354

      SHA512

      f73d29bafe04da884623d37564f25e62b217dd015e46637c9b5762a0d4727192e3d35b8f1c0eb9050f82c7137c518ad3c6d6f149fe31cd887180d066ade183df