Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

09/01/2024, 02:53

240109-ddqyzschdk 6

09/01/2024, 02:51

240109-dcejkacghn 3

09/01/2024, 02:48

240109-damr6acgbr 3

Analysis

  • max time kernel
    143s
  • max time network
    53s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09/01/2024, 02:48

General

  • Target

    MLvUvEDOEuKLTktpDCrXoFfYVFbxTEfqhGQYVnKCVdocogSLzLRgZCfRZLPrHCKVfddmhcuolTJEiAOTVsCNgjIcNKMUJOqsGRDI.exe

  • Size

    374KB

  • MD5

    9de24a3783de7801078ce41dde985fe3

  • SHA1

    5c50528ec983cc2ef5434505e9c88f383f34664f

  • SHA256

    091cef11e74e54f8036895cacaf381dd44d4150f30e1433d5a93dbe0d89b6c3c

  • SHA512

    4fbe35b80443656d262cdd4f9202ec0b2ea72404a39e076df58c6a84962ac0b8ca8103c719d536a4fc89fcb9fddb68ed1c312bb974dadfeec4d5322acd17b959

  • SSDEEP

    6144:Pcm6lZ+F3X+ffm8Qkt93qMMRoeYu4SCUXv0guGqwtI1r0f2OK4grp5/vlSaSMxi:PcmISXGmfktWGu4Mc7FQMxi

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\MLvUvEDOEuKLTktpDCrXoFfYVFbxTEfqhGQYVnKCVdocogSLzLRgZCfRZLPrHCKVfddmhcuolTJEiAOTVsCNgjIcNKMUJOqsGRDI.exe
    "C:\Users\Admin\AppData\Local\Temp\MLvUvEDOEuKLTktpDCrXoFfYVFbxTEfqhGQYVnKCVdocogSLzLRgZCfRZLPrHCKVfddmhcuolTJEiAOTVsCNgjIcNKMUJOqsGRDI.exe"
    1⤵
      PID:208

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/208-1-0x0000000000880000-0x000000000091A000-memory.dmp

      Filesize

      616KB

    • memory/208-0-0x0000000074930000-0x00000000750E0000-memory.dmp

      Filesize

      7.7MB

    • memory/208-3-0x0000000007640000-0x0000000007650000-memory.dmp

      Filesize

      64KB

    • memory/208-2-0x0000000002BD0000-0x0000000002BD1000-memory.dmp

      Filesize

      4KB

    • memory/208-5-0x00000000078F0000-0x0000000007982000-memory.dmp

      Filesize

      584KB

    • memory/208-4-0x0000000007E00000-0x00000000083A4000-memory.dmp

      Filesize

      5.6MB

    • memory/208-6-0x00000000055A0000-0x00000000055AA000-memory.dmp

      Filesize

      40KB

    • memory/208-7-0x0000000074930000-0x00000000750E0000-memory.dmp

      Filesize

      7.7MB

    • memory/208-8-0x0000000007640000-0x0000000007650000-memory.dmp

      Filesize

      64KB