Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
146s -
max time network
169s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
06/01/2024, 02:24
General
-
Target
41fbbf5fca21d7c9a1a2e4154780851a.exe
-
Size
82KB
-
MD5
41fbbf5fca21d7c9a1a2e4154780851a
-
SHA1
ec3d7a65da21071593d76f56e7072ce7ea1cbb5e
-
SHA256
31272cf8eec45f2152de2257c4ad33cb7cc993d2232292e3d4c78ed6b30ef5fd
-
SHA512
3bd350f60281f17e44639629d682e4d2e2ca88abf81075e93404500d37c455e35135e7825383c837a5961b6d1b72cdde7476e909c5c6faa2917f74c976e5c443
-
SSDEEP
1536:1FLzIUNE3cpumKR75jFkAz96K/PUM562t8lA1N9DIEkL0RDCy2K:1F4UNE3cpxQBoKU0XtIMN9cEcy2K
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\41fbbf5fca21d7c9a1a2e4154780851a.exe"C:\Users\Admin\AppData\Local\Temp\41fbbf5fca21d7c9a1a2e4154780851a.exe"1⤵
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\41fbbf5fca21d7c9a1a2e4154780851a.exeC:\Users\Admin\AppData\Local\Temp\41fbbf5fca21d7c9a1a2e4154780851a.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
82KB
MD5451261d35be72ded19611026d03c27e6
SHA1911b11a5a3e87c8c2889f33802ae9c134abcfb0a
SHA25632d539c918cf460ab8f1e0334407baa317c78c1626399d0df5c51b7de50db0f6
SHA512bcc43838c46cf5d4c91cc3476616efbd9efaa16e85ce29c534f835564fe867c899c0949163259db37e2bba3b809622995754977536ebc1005372f657882763a6
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
56KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
108KB