Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    148s
  • max time network
    135s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06/01/2024, 14:24

General

  • Target

    4674d8c438958513b772b638c25ee1ba.exe

  • Size

    1.1MB

  • MD5

    4674d8c438958513b772b638c25ee1ba

  • SHA1

    6940a0623dfd11d720af174501c172713f57e361

  • SHA256

    23f32d642f9f49d7962a00dec18535ff6888c6fec6c4eb21fa36d2b85eb3758a

  • SHA512

    e8fefddcd9fb69dc3ae10d65b431a6dd5d3fbc17598a052b9b17e63a3aeb85c00d92911f5edb0bd0785083efcd78c4aaf024ecc03262076d44bab61d77ce5881

  • SSDEEP

    24576:KWvknOMEd8Z25mklO2EKhm74VZgrCJW8n6PieyaKoPiNoJDXVKu:KUeOMc8E5bg2XhiggrcD6Ke9aNoZVKu

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies Internet Explorer settings 1 TTPs 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\4674d8c438958513b772b638c25ee1ba.exe
    "C:\Users\Admin\AppData\Local\Temp\4674d8c438958513b772b638c25ee1ba.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2692
    • C:\Users\Admin\AppData\Local\Temp\a2h7gscD49\OV5XeRVS\Setup.exe
      C:\Users\Admin\AppData\Local\Temp\a2h7gscD49\OV5XeRVS\Setup.exe --relaunch
      2⤵
      • Executes dropped EXE
      • Modifies Internet Explorer settings
      PID:4896

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2692-0-0x00000000021F0000-0x00000000022EF000-memory.dmp

    Filesize

    1020KB

  • memory/2692-2-0x0000000000400000-0x0000000000521000-memory.dmp

    Filesize

    1.1MB

  • memory/2692-1-0x00000000021F0000-0x00000000022EF000-memory.dmp

    Filesize

    1020KB

  • memory/2692-9-0x00000000021F0000-0x00000000022EF000-memory.dmp

    Filesize

    1020KB

  • memory/2692-18-0x00000000021F0000-0x00000000022EF000-memory.dmp

    Filesize

    1020KB

  • memory/2692-27-0x00000000021F0000-0x00000000022EF000-memory.dmp

    Filesize

    1020KB

  • memory/2692-37-0x00000000021F0000-0x00000000022EF000-memory.dmp

    Filesize

    1020KB

  • memory/2692-46-0x00000000021F0000-0x00000000022EF000-memory.dmp

    Filesize

    1020KB

  • memory/2692-55-0x00000000021F0000-0x00000000022EF000-memory.dmp

    Filesize

    1020KB

  • memory/2692-65-0x00000000021F0000-0x00000000022EF000-memory.dmp

    Filesize

    1020KB

  • memory/2692-64-0x00000000021F0000-0x00000000022EF000-memory.dmp

    Filesize

    1020KB

  • memory/2692-63-0x00000000021F0000-0x00000000022EF000-memory.dmp

    Filesize

    1020KB

  • memory/2692-62-0x00000000021F0000-0x00000000022EF000-memory.dmp

    Filesize

    1020KB

  • memory/2692-61-0x00000000021F0000-0x00000000022EF000-memory.dmp

    Filesize

    1020KB

  • memory/2692-60-0x00000000021F0000-0x00000000022EF000-memory.dmp

    Filesize

    1020KB

  • memory/2692-59-0x00000000021F0000-0x00000000022EF000-memory.dmp

    Filesize

    1020KB

  • memory/2692-58-0x00000000021F0000-0x00000000022EF000-memory.dmp

    Filesize

    1020KB

  • memory/2692-57-0x00000000021F0000-0x00000000022EF000-memory.dmp

    Filesize

    1020KB

  • memory/2692-56-0x00000000021F0000-0x00000000022EF000-memory.dmp

    Filesize

    1020KB

  • memory/2692-54-0x00000000021F0000-0x00000000022EF000-memory.dmp

    Filesize

    1020KB

  • memory/2692-53-0x00000000021F0000-0x00000000022EF000-memory.dmp

    Filesize

    1020KB

  • memory/2692-205-0x00000000021F0000-0x00000000022EF000-memory.dmp

    Filesize

    1020KB

  • memory/2692-52-0x00000000021F0000-0x00000000022EF000-memory.dmp

    Filesize

    1020KB

  • memory/2692-51-0x00000000021F0000-0x00000000022EF000-memory.dmp

    Filesize

    1020KB

  • memory/2692-50-0x00000000021F0000-0x00000000022EF000-memory.dmp

    Filesize

    1020KB

  • memory/2692-49-0x00000000021F0000-0x00000000022EF000-memory.dmp

    Filesize

    1020KB

  • memory/2692-48-0x00000000021F0000-0x00000000022EF000-memory.dmp

    Filesize

    1020KB

  • memory/2692-47-0x00000000021F0000-0x00000000022EF000-memory.dmp

    Filesize

    1020KB

  • memory/2692-45-0x00000000021F0000-0x00000000022EF000-memory.dmp

    Filesize

    1020KB

  • memory/2692-44-0x00000000021F0000-0x00000000022EF000-memory.dmp

    Filesize

    1020KB

  • memory/2692-43-0x00000000021F0000-0x00000000022EF000-memory.dmp

    Filesize

    1020KB

  • memory/2692-42-0x00000000021F0000-0x00000000022EF000-memory.dmp

    Filesize

    1020KB

  • memory/2692-41-0x00000000021F0000-0x00000000022EF000-memory.dmp

    Filesize

    1020KB

  • memory/2692-40-0x00000000021F0000-0x00000000022EF000-memory.dmp

    Filesize

    1020KB

  • memory/2692-39-0x00000000021F0000-0x00000000022EF000-memory.dmp

    Filesize

    1020KB

  • memory/2692-38-0x00000000021F0000-0x00000000022EF000-memory.dmp

    Filesize

    1020KB

  • memory/2692-36-0x00000000021F0000-0x00000000022EF000-memory.dmp

    Filesize

    1020KB

  • memory/2692-35-0x00000000021F0000-0x00000000022EF000-memory.dmp

    Filesize

    1020KB

  • memory/2692-34-0x00000000021F0000-0x00000000022EF000-memory.dmp

    Filesize

    1020KB

  • memory/2692-33-0x00000000021F0000-0x00000000022EF000-memory.dmp

    Filesize

    1020KB

  • memory/2692-32-0x00000000021F0000-0x00000000022EF000-memory.dmp

    Filesize

    1020KB

  • memory/2692-31-0x00000000021F0000-0x00000000022EF000-memory.dmp

    Filesize

    1020KB

  • memory/2692-30-0x00000000021F0000-0x00000000022EF000-memory.dmp

    Filesize

    1020KB

  • memory/2692-29-0x00000000021F0000-0x00000000022EF000-memory.dmp

    Filesize

    1020KB

  • memory/2692-28-0x00000000021F0000-0x00000000022EF000-memory.dmp

    Filesize

    1020KB

  • memory/2692-26-0x00000000021F0000-0x00000000022EF000-memory.dmp

    Filesize

    1020KB

  • memory/2692-25-0x00000000021F0000-0x00000000022EF000-memory.dmp

    Filesize

    1020KB

  • memory/2692-24-0x00000000021F0000-0x00000000022EF000-memory.dmp

    Filesize

    1020KB

  • memory/2692-23-0x00000000021F0000-0x00000000022EF000-memory.dmp

    Filesize

    1020KB

  • memory/2692-22-0x00000000021F0000-0x00000000022EF000-memory.dmp

    Filesize

    1020KB

  • memory/2692-21-0x00000000021F0000-0x00000000022EF000-memory.dmp

    Filesize

    1020KB

  • memory/2692-20-0x00000000021F0000-0x00000000022EF000-memory.dmp

    Filesize

    1020KB

  • memory/2692-19-0x00000000021F0000-0x00000000022EF000-memory.dmp

    Filesize

    1020KB

  • memory/2692-17-0x00000000021F0000-0x00000000022EF000-memory.dmp

    Filesize

    1020KB

  • memory/2692-16-0x00000000021F0000-0x00000000022EF000-memory.dmp

    Filesize

    1020KB

  • memory/2692-15-0x00000000021F0000-0x00000000022EF000-memory.dmp

    Filesize

    1020KB

  • memory/2692-14-0x00000000021F0000-0x00000000022EF000-memory.dmp

    Filesize

    1020KB

  • memory/2692-13-0x00000000021F0000-0x00000000022EF000-memory.dmp

    Filesize

    1020KB

  • memory/2692-12-0x00000000021F0000-0x00000000022EF000-memory.dmp

    Filesize

    1020KB

  • memory/2692-11-0x00000000021F0000-0x00000000022EF000-memory.dmp

    Filesize

    1020KB

  • memory/2692-10-0x0000000000400000-0x0000000000521000-memory.dmp

    Filesize

    1.1MB

  • memory/2692-8-0x00000000021F0000-0x00000000022EF000-memory.dmp

    Filesize

    1020KB

  • memory/2692-7-0x00000000021F0000-0x00000000022EF000-memory.dmp

    Filesize

    1020KB

  • memory/2692-850-0x00000000021F0000-0x00000000022EF000-memory.dmp

    Filesize

    1020KB

  • memory/4896-429-0x0000000000400000-0x0000000000521000-memory.dmp

    Filesize

    1.1MB

  • memory/4896-621-0x00000000006C0000-0x00000000007BF000-memory.dmp

    Filesize

    1020KB

  • memory/4896-841-0x00000000006C0000-0x00000000007BF000-memory.dmp

    Filesize

    1020KB