Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    146s
  • max time network
    81s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06/01/2024, 20:33

General

  • Target

    471ec6f41b1d1388f4cccdab5d60aed8.exe

  • Size

    224KB

  • MD5

    471ec6f41b1d1388f4cccdab5d60aed8

  • SHA1

    d132118347df2a2133a302e17bf0d4068b714427

  • SHA256

    12abe62ffb507f3229fefa97c81600454eb122800c0f9a8c160a971937f7d6b3

  • SHA512

    b049f5c43ba57f3f7be3dc39f9713dfdb2dd71b62cf945f68936ac558dfa5438354afce31f51b26ab04efad899fab1b4e172bebb2a0d6dbd4a358e4e0bc7309e

  • SSDEEP

    3072:+Wb1bW8HfeSnNXlaHj7pTGUSvyDbf57bwyiO26w+cHHerrHtYI11rO/lHhYY:+ObWWwpCUS6D17bel6w+cHHCrONHhYY

Score
4/10

Malware Config

Signatures

  • Drops file in Windows directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\471ec6f41b1d1388f4cccdab5d60aed8.exe
    "C:\Users\Admin\AppData\Local\Temp\471ec6f41b1d1388f4cccdab5d60aed8.exe"
    1⤵
    • Drops file in Windows directory
    PID:4952

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4952-2-0x0000000001960000-0x0000000001970000-memory.dmp

    Filesize

    64KB

  • memory/4952-1-0x0000000001940000-0x0000000001950000-memory.dmp

    Filesize

    64KB

  • memory/4952-3-0x00000000015F0000-0x0000000001610000-memory.dmp

    Filesize

    128KB

  • memory/4952-8-0x00000000015F0000-0x0000000001610000-memory.dmp

    Filesize

    128KB

  • memory/4952-4-0x00000000018F0000-0x000000000191F000-memory.dmp

    Filesize

    188KB

  • memory/4952-0-0x00000000019A0000-0x00000000019B0000-memory.dmp

    Filesize

    64KB

  • memory/4952-16-0x00000000015F0000-0x0000000001610000-memory.dmp

    Filesize

    128KB