Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
188s -
max time network
199s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
06/01/2024, 10:09
General
-
Target
45f5982659f8859a571e5e7428212d71.exe
-
Size
134KB
-
MD5
45f5982659f8859a571e5e7428212d71
-
SHA1
44311718558d59126bf46ff11373fb3b65cfb338
-
SHA256
e6fc16832bfea3a36cddafcb29380e31aad6a1e0c867952705b1ea33792312a5
-
SHA512
7b8a8fde89298304b73ebeb37c32d2ab57b5354d781e09e39b855ff9f753b8b3b944ad258af3741b60b77af5d0a09c9df4e355a19659e0d1f017ba0c2f0d1e78
-
SSDEEP
3072:z6Y86ICOgKZBEt3t04XaWxIBUFCneGFYYBuVTCFDQ:OY86kgKs3t0PWWBCUeukCFE
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Drops file in Windows directory 6 IoCs
-
Modifies Internet Explorer settings 1 TTPs 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\45f5982659f8859a571e5e7428212d71.exe"C:\Users\Admin\AppData\Local\Temp\45f5982659f8859a571e5e7428212d71.exe"1⤵
- Drops file in Windows directory
- Suspicious use of WriteProcessMemory
-
C:\Windows\Pgekea.exeC:\Windows\Pgekea.exe2⤵
- Executes dropped EXE
- Drops file in Windows directory
- Modifies Internet Explorer settings
- Suspicious behavior: EnumeratesProcesses
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
134KB
MD545f5982659f8859a571e5e7428212d71
SHA144311718558d59126bf46ff11373fb3b65cfb338
SHA256e6fc16832bfea3a36cddafcb29380e31aad6a1e0c867952705b1ea33792312a5
SHA5127b8a8fde89298304b73ebeb37c32d2ab57b5354d781e09e39b855ff9f753b8b3b944ad258af3741b60b77af5d0a09c9df4e355a19659e0d1f017ba0c2f0d1e78
-
Filesize
362B
MD56bf2ddc76a6f3944a13ce90022f6e336
SHA128fa933b537775ab35ee314faf512602303c4a36
SHA2564ea7310368dfafd4718790f5c94bf887170f29545e25d5bca289e5cd4bd0410c
SHA512c1f6e73e63f2b64cdc681a07b906a8e2a4b392c0ba9fa3111cacc9281c3fc99d84f2ad95e4d06b93f53be34ae2d083e8c4f8a39fc2b5c4dbb4720186a9b65981
-
Filesize
232KB
-
Filesize
232KB
-
Filesize
232KB
-
Filesize
232KB
-
Filesize
232KB
-
Filesize
232KB
-
Filesize
232KB
-
Filesize
232KB
-
Filesize
4KB
-
Filesize
232KB
-
Filesize
232KB
-
Filesize
232KB
-
Filesize
232KB
-
Filesize
232KB
-
Filesize
232KB
-
Filesize
232KB
-
Filesize
232KB
-
Filesize
232KB
-
Filesize
232KB
-
Filesize
232KB